The version of Google Chrome installed on the remote Windows host is prior to 148.0.7778.96. It is, therefore, affected by multiple vulnerabilities as referenced in the 2026_05_stable-channel-update-for-desktop advisory.

  - Use after free in WebRTC. (CVE-2026-7928, CVE-2026-7987, CVE-2026-8016)

  - Integer overflow in Blink. (CVE-2026-7896)

  - Use after free in Mobile. (CVE-2026-7897)

  - Use after free in Chromoting. (CVE-2026-7898, CVE-2026-7925)

  - Out of bounds read and write in V8. (CVE-2026-7899)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Google Chrome < 148.0.7778.96 Multiple Vulnerabilities

critical Nessus Plugin ID 312822

Version 1.4

Version 1.3

Version 1.2

Version 1.4 May 8, 2026, 8:04 PM IAVM reference STIG Severity (set to "I") Plugin Feed: 202605082004
Version 1.3 May 8, 2026, 7:45 AM CVSS metrics ("CVSSv3 score" set to 9.6) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H") CVSSv3 score source (set to "CVE-2026-7910") Plugin Feed: 202605080745
Version 1.2 May 7, 2026, 8:04 AM CVSS metrics ("CVSSv3 score" set to 8.8. "CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H") CVSSv2 score source (changed from "CVE-2026-8016" to "CVE-2026-7927") New Plugin Feed: 202605070804