The version of Google Chrome installed on the remote macOS host is prior to 153.0.8010.47. It is, therefore, affected by multiple vulnerabilities as referenced in the 2026_09_stable-channel-update-for-desktop_0541751186 advisory.

  - Use after free in Workers in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially     execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)     (CVE-2026-91749)

  - Out of bounds read in WebGL in Google Chrome on on Android prior to 153.0.8010.47 allowed a remote     attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity:
    Critical) (CVE-2026-91726)

  - Use after free in Internals in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to     potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security     severity: Critical) (CVE-2026-91721)

  - Use after free in Input in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had     compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted     HTML page. (Chromium security severity: High) (CVE-2026-91724)

  - Integer overflow in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute     arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)     (CVE-2026-91728)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Google Chrome installed on the remote Windows host is prior to 153.0.8010.47. It is, therefore, affected by multiple vulnerabilities as referenced in the 2026_09_stable-channel-update-for-desktop_0541751186 advisory.

  - Use after free in Workers in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially     execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)     (CVE-2026-91749)

  - Out of bounds read in WebGL in Google Chrome on on Android prior to 153.0.8010.47 allowed a remote     attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity:
    Critical) (CVE-2026-91726)

  - Use after free in Internals in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to     potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security     severity: Critical) (CVE-2026-91721)

  - Use after free in Input in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had     compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted     HTML page. (Chromium security severity: High) (CVE-2026-91724)

  - Integer overflow in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute     arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)     (CVE-2026-91728)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
345978	Google Chrome < 153.0.8010.47 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	9/15/2026	9/17/2026	critical
345979	Google Chrome < 153.0.8010.47 Multiple Vulnerabilities	Nessus	Windows	9/15/2026	9/17/2026	critical

Detections

Analytics

Plugins Search

critical

critical