The version of Microsoft Edge installed on the remote Windows host is prior to 152.0.4191.66. It is, therefore, affected by multiple vulnerabilities as referenced in the September 11, 2026 advisory.

  - Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute     arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)     (CVE-2026-87491)

  - Use after free in DevTools in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute     arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)     (CVE-2026-85042)

  - Incomplete cleanup in Network in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to bypass     system access restrictions via crafted network traffic. (Chromium security severity: High)     (CVE-2026-85043)

  - Race condition in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute     arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)     (CVE-2026-85045)

  - Use after free in Compositing in Google Chrome prior to 152.0.7977.82 allowed a remote attacker who had     compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page.
    (Chromium security severity: High) (CVE-2026-85048)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Microsoft Edge (Chromium) < 152.0.4191.66 Multiple Vulnerabilities

critical Nessus Plugin ID 344899

Version 1.2

Version 1.1

Version 1.2 Sep 15, 2026, 8:11 AM CVE (set "CVE" coverage to "CVE-2026-85042,CVE-2026-85043,CVE-2026-85045,CVE-2026-85048,CVE-2026-85049,CVE-2026-85051,CVE-2026-85052,CVE-2026-85053,CVE-2026-85892,CVE-2026-87491") Plugin metadata Plugin Feed: 202609150811
Version 1.1 Sep 12, 2026, 3:33 AM New Plugin Feed: 202609120333