The version of Google Chrome installed on the remote macOS host is prior to 148.0.7778.215. It is, therefore, affected by multiple vulnerabilities as referenced in the 2026_05_stable-channel-update-for-desktop_0877304591 advisory.

  - Use after free in Input in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had     compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
    (Chromium security severity: High) (CVE-2026-9997)

  - Use after free in Dawn in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially     perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical) (CVE-2026-9874)

  - Out of bounds write in GPU in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker     to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)     (CVE-2026-9872)

  - Use after free in Network in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute     arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Critical)     (CVE-2026-9873)

  - Out of bounds read in WebGL in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker     to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)     (CVE-2026-9875)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Google Chrome < 148.0.7778.215 Multiple Vulnerabilities

critical Nessus Plugin ID 317484

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.5 Jun 6, 2026, 9:02 AM Plugin metadata Plugin Feed: 202606060902
Version 1.4 Jun 5, 2026, 1:04 PM Plugin metadata (Add IAVM Info) Plugin Feed: 202606051304
Version 1.3 Jun 4, 2026, 12:19 PM CVSSv2 score source (changed from "CVE-2026-9887" to "CVE-2026-9940") Plugin Feed: 202606041219
Version 1.2 Jun 1, 2026, 6:49 AM CVSS metrics ("CVSSv3 score" set to 9.6) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H") CVSSv2 score source (changed from "CVE-2026-9997" to "CVE-2026-9887") CVSSv3 score source (set to "CVE-2026-9874") Plugin Feed: 202606010649
Version 1.1 May 29, 2026, 5:27 PM New Plugin Feed: 202605291727