The version of Google Chrome installed on the remote macOS host is prior to 149.0.7827.155. It is, therefore, affected by multiple vulnerabilities as referenced in the 2026_06_stable-channel-update-for-desktop_01750511403 advisory.

  - Use after free in Extensions in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who had     compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
    (Chromium security severity: High) (CVE-2026-12467)

  - Use after free in DigitalCredentials in Google Chrome on Windows prior to 149.0.7827.155 allowed a remote     attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity:
    Critical) (CVE-2026-12440)

  - Use after free in WebShare in Google Chrome on Windows prior to 149.0.7827.155 allowed a remote attacker     who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
    (Chromium security severity: Critical) (CVE-2026-12437)

  - Inappropriate implementation in WebView in Google Chrome on Android prior to 149.0.7827.155 allowed a     remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a     crafted HTML page. (Chromium security severity: Critical) (CVE-2026-12438)

  - Use after free in Digital Credentials in Google Chrome prior to 149.0.7827.155 allowed a remote attacker     to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)     (CVE-2026-12439)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Google Chrome < 149.0.7827.155 Multiple Vulnerabilities

critical Nessus Plugin ID 321273

Version 1.2

Version 1.1

Version 1.2 Jun 24, 2026, 1:53 PM CVSS metrics ("CVSSv3 score" set to 9.6) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H") CVSSv3 score source (set to "CVE-2026-12440") Plugin metadata Plugin Feed: 202606241353
Version 1.1 Jun 17, 2026, 3:56 AM New Plugin Feed: 202606170356