The version of Microsoft Edge installed on the remote Windows host is prior to 152.0.4191.53. It is, therefore, affected by multiple vulnerabilities as referenced in the August 28, 2026 advisory.

  - Information leak in Animation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain     sensitive information via a crafted HTML page. (Chromium security severity: Medium) (CVE-2026-79293)

  - Incorrect authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose     information over a network. (CVE-2026-62904)

  - Improper neutralization of parameter/argument delimiters in Microsoft Edge (Chromium-based) allows an     unauthorized attacker to execute code over a network. (CVE-2026-66323)

  - External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker     to perform spoofing over a network. (CVE-2026-66324)

  - Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a     network. (CVE-2026-66798)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Plugins Search

medium