The version of Google Chrome installed on the remote macOS host is prior to 148.0.7778.178. It is, therefore, affected by multiple vulnerabilities as referenced in the 2026_05_stable-channel-update-for-desktop_0841193308 advisory.

  - Use after free in DOM in Google Chrome on prior to 148.0.7778.179 allowed a remote attacker to execute     arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)     (CVE-2026-9126)

  - Use after free in WebRTC in Google Chrome on Linux prior to 148.0.7778.179 allowed a remote attacker to     execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical) (CVE-2026-9111)

  - Inappropriate implementation in UI in Google Chrome on Windows prior to 148.0.7778.179 allowed a remote     attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page.
    (Chromium security severity: Critical) (CVE-2026-9110)

  - Use after free in GPU in Google Chrome on Windows prior to 148.0.7778.179 allowed a remote attacker to     execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)     (CVE-2026-9112)

  - Out of bounds read in GPU in Google Chrome on Mac prior to 148.0.7778.179 allowed a remote attacker to     perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: High)     (CVE-2026-9113)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Google Chrome < 148.0.7778.178 Multiple Vulnerabilities

high Nessus Plugin ID 315911

Version 1.4

Version 1.1

Version 1.4 May 27, 2026, 1:37 PM Plugin metadata Plugin Feed: 202605271337
Version 1.1 May 21, 2026, 4:37 AM New Plugin Feed: 202605210437