The version of Google Chrome installed on the remote Windows host is prior to 155.0.8059.79. It is, therefore, affected by multiple vulnerabilities as referenced in the 2026_10_stable-channel-update-for-desktop_01668083673 advisory.

  - Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute     arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)     (CVE-2026-110139, CVE-2026-110153, CVE-2026-110167, CVE-2026-110171, CVE-2026-110172)

  - Use after free in PDF in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute     arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)     (CVE-2026-110136)

  - Use after free in WebRTC in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute     arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)     (CVE-2026-110137)

  - Use after free in ShapeDetection in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had     compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page.
    (Chromium security severity: High) (CVE-2026-110138)

  - Type confusion in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute     arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)     (CVE-2026-110140)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Google Chrome installed on the remote macOS host is prior to 155.0.8059.79. It is, therefore, affected by multiple vulnerabilities as referenced in the 2026_10_stable-channel-update-for-desktop_01668083673 advisory.

  - Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute     arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)     (CVE-2026-110139, CVE-2026-110153, CVE-2026-110167, CVE-2026-110171, CVE-2026-110172)

  - Use after free in PDF in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute     arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)     (CVE-2026-110136)

  - Use after free in WebRTC in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute     arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)     (CVE-2026-110137)

  - Use after free in ShapeDetection in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had     compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page.
    (Chromium security severity: High) (CVE-2026-110138)

  - Type confusion in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute     arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)     (CVE-2026-110140)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Use after free in Canvas in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to potentially     execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)     (CVE-2026-110154)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
365509	Google Chrome < 155.0.8059.79 Multiple Vulnerabilities	Nessus	Windows	10/14/2026	10/14/2026	critical
365510	Google Chrome < 155.0.8059.79 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	10/14/2026	10/14/2026	critical
365726	Linux Distros Unpatched Vulnerability : CVE-2026-110154	Nessus	Misc.	10/14/2026	10/14/2026	high

Detections

Analytics

Plugins Search

critical

critical

high