The version of Google Chrome installed on the remote macOS host is prior to 153.0.8010.47. It is, therefore, affected by multiple vulnerabilities as referenced in the 2026_09_stable-channel-update-for-desktop_0541751186 advisory.

  - Use after free in Workers in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially     execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)     (CVE-2026-91749)

  - Missing authorization in AppManifest in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who     had compromised the renderer process and leveraged social engineering to bypass web origin policy via a     crafted HTML page. (Chromium security severity: Medium) (CVE-2026-91732)

  - Race condition in Network in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had     compromised the renderer process to obtain cross-origin data via a crafted HTML page. (Chromium security     severity: High) (CVE-2026-91708)

  - Type confusion in ServiceWorker in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to     execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)     (CVE-2026-91709, CVE-2026-91715)

  - Use after free in WebAppInstalls in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to     execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)     (CVE-2026-91710)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Google Chrome < 153.0.8010.47 Multiple Vulnerabilities

high Nessus Plugin ID 345978

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.5 Sep 22, 2026, 9:09 PM Plugin metadata Plugin Feed: 202609222109
Version 1.4 Sep 21, 2026, 3:50 PM CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:P/RL:O/RC:C") CVSS metrics ("CVSSv3 score" set to 8.1) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N") CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:POC/RL:OF/RC:C") Exploit attributes ("Exploitability ease" changed from "No known exploits are available" to "Exploits are available") Exploit attributes ("Exploit available" set to "True") CVSSv3 score source (set to "CVE-2026-91732") Plugin Feed: 202609211550
Version 1.3 Sep 18, 2026, 11:05 PM Plugin metadata (Add IAVM Info) Plugin Feed: 202609182305
Version 1.2 Sep 17, 2026, 12:32 PM CVSS metrics ("CVSSv3 score" set to 9.6) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H") Plugin Feed: 202609171232
Version 1.1 Sep 16, 2026, 5:33 AM New Plugin Feed: 202609160533