The version of Google Chrome installed on the remote Windows host is prior to 154.0.8037.97. It is, therefore, affected by multiple vulnerabilities as referenced in the 2026_10_stable-channel-update-for-desktop advisory.

  - Use after free in FedCM in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute     arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)     (CVE-2026-103630)

  - Integer overflow in Compositing in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to leak     cross-origin data via a crafted HTML page. (Chromium security severity: High) (CVE-2026-103621)

  - Use after free in SVG in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute     arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)     (CVE-2026-103622)

  - Use after free in MediaStream in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute     arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)     (CVE-2026-103623)

  - Use after free in Contextual Tasks in Google Chrome on on Windows prior to 154.0.8037.97 allowed a remote     attacker who had compromised the renderer process to potentially execute arbitrary code outside the     sandbox via a crafted HTML page. (Chromium security severity: High) (CVE-2026-103624)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Google Chrome < 154.0.8037.97 Multiple Vulnerabilities

critical Nessus Plugin ID 362703

Version 1.3

Version 1.2

Version 1.1

Version 1.3 Oct 16, 2026, 11:43 PM Plugin metadata (add iava/stig) Plugin Feed: 202610162343
Version 1.2 Oct 7, 2026, 3:19 PM CVSS metrics ("CVSSv3 score" set to 9.6) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H") Plugin Feed: 202610071519
Version 1.1 Oct 2, 2026, 11:09 PM New Plugin Feed: 202610022309