The version of Microsoft Edge installed on the remote Windows host is prior to 152.0.4191.53. It is, therefore, affected by multiple vulnerabilities as referenced in the August 28, 2026 advisory.

  - Information leak in Animation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain     sensitive information via a crafted HTML page. (Chromium security severity: Medium) (CVE-2026-79293)

  - Incorrect authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose     information over a network. (CVE-2026-62904)

  - Improper neutralization of parameter/argument delimiters in Microsoft Edge (Chromium-based) allows an     unauthorized attacker to execute code over a network. (CVE-2026-66323)

  - External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker     to perform spoofing over a network. (CVE-2026-66324)

  - Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a     network. (CVE-2026-66798)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Microsoft Edge (Chromium) < 152.0.4191.53 Multiple Vulnerabilities

medium Nessus Plugin ID 341362

Version 1.3

Version 1.2

Version 1.1

Version 1.3 Sep 4, 2026, 12:58 PM Plugin metadata (Add IAVM info) Plugin Feed: 202609041258
Version 1.2 Sep 2, 2026, 11:53 AM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:POC/RL:OF/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:P/RL:O/RC:C") Exploit attributes ("Exploit available" set to "True") Exploit attributes ("Exploitability ease" changed from "No known exploits are available" to "Exploits are available") Plugin Feed: 202609021153
Version 1.1 Aug 29, 2026, 12:30 AM New Plugin Feed: 202608290030