The version of Microsoft Edge installed on the remote Windows host is prior to 156.0.4314.42. It is, therefore, affected by multiple vulnerabilities as referenced in the October 26, 2026 advisory.

  - Improper input validation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker     to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security     severity: Medium) (CVE-2026-113016, CVE-2026-113231, CVE-2026-113264)

  - Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute     arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)     (CVE-2026-102299, CVE-2026-102321, CVE-2026-102323, CVE-2026-102326, CVE-2026-102328)

  - Uninitialized resource in WebGPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to     obtain cross-origin data via a crafted HTML page. (Chromium security severity: High) (CVE-2026-102300)

  - Out of bounds write in GPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had     compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted     HTML page. (Chromium security severity: High) (CVE-2026-102301)

  - Buffer overflow in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute     arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)     (CVE-2026-102302)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Plugins Search

high