There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Use of released resource in Core in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had
    compromised the renderer process to potentially obtain cross-origin data via a crafted HTML page.
    (Chromium security severity: Low) (CVE-2026-106339)

The version of Google Chrome installed on the remote Windows host is prior to 155.0.8059.39. It is, therefore, affected by multiple vulnerabilities as referenced in the 2026_10_stable-channel-update-for-desktop_086471744 advisory.

  - Use after free in ANGLE in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to     execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)     (CVE-2026-106419)

  - Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute     arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)     (CVE-2026-106190, CVE-2026-106318, CVE-2026-106383, CVE-2026-106423)

  - Incorrect Authorization in SiteIsolation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker     to execute arbitrary code via a crafted HTML page. (Chromium security severity: High) (CVE-2026-102322)

  - Incorrect reference resolution in DevTools in Google Chrome prior to 155.0.8059.39 allowed a remote     attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page.
    (Chromium security severity: Medium) (CVE-2026-106181)

  - Uninitialized resource in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to     obtain cross-origin data via a crafted HTML page. (Chromium security severity: High) (CVE-2026-106184)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Google Chrome installed on the remote macOS host is prior to 155.0.8059.39. It is, therefore, affected by multiple vulnerabilities as referenced in the 2026_10_stable-channel-update-for-desktop_086471744 advisory.

  - Use after free in ANGLE in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to     execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)     (CVE-2026-106419)

  - Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute     arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)     (CVE-2026-106190, CVE-2026-106318, CVE-2026-106383, CVE-2026-106423)

  - Incorrect Authorization in SiteIsolation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker     to execute arbitrary code via a crafted HTML page. (Chromium security severity: High) (CVE-2026-102322)

  - Incorrect reference resolution in DevTools in Google Chrome prior to 155.0.8059.39 allowed a remote     attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page.
    (Chromium security severity: Medium) (CVE-2026-106181)

  - Uninitialized resource in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to     obtain cross-origin data via a crafted HTML page. (Chromium security severity: High) (CVE-2026-106184)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Use of released resource in Core in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had     compromised the renderer process to potentially obtain cross-origin data via a crafted HTML page.
    (Chromium security severity: Low) (CVE-2026-106339)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
474272	Chainguard: multiple chromium packages: security update to 155.0.8059.39-r0	Tenable Cloud Security	Chainguard Local Security Checks	10/10/2026	10/10/2026	low
474272	Chainguard: multiple chromium packages: security update to 155.0.8059.39-r0	Tenable Self-Hosted Container Security	Chainguard Local Security Checks	10/10/2026	10/10/2026	low
363364	Google Chrome < 155.0.8059.39 Multiple Vulnerabilities	Nessus	Windows	10/6/2026	10/8/2026	critical
363365	Google Chrome < 155.0.8059.39 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	10/6/2026	10/8/2026	critical
363572	Linux Distros Unpatched Vulnerability : CVE-2026-106339	Nessus	Misc.	10/7/2026	10/8/2026	low

Detections

Analytics

Plugins Search

low

low

critical

critical

low