The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:69098 advisory.

    * chromium-browser: Skia in Google Chrome: Sandbox escape via crafted HTML page (CVE-2026-19154)
      * chromium-browser: skia: Skia: Sandbox escape via out-of-bounds write in Chromium (CVE-2026-19173)
      * chromium-browser: Skia in Google Chrome: Cross-origin data leakage via uninitialized use     (CVE-2026-19161)
      * chromium-browser: Skia: Arbitrary code execution via crafted HTML page (CVE-2026-19176)
      * chromium-browser: Chromium: Information leak allows web origin policy bypass (CVE-2026-76041)
      * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash     (CVE-2026-28984)
      * webkitgtk: Visiting a website may lead to an app denial-of-service (CVE-2026-43804)
      * webkitgtk: Websites may know if the user has visited a given link (CVE-2026-64713)
      * webkitgtk: Maliciously crafted web content may violate iframe sandboxing policy (CVE-2026-64728)
      * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process termination     (CVE-2026-64787)
      * webkitgtk: Visiting a website that frames malicious content may lead to UI spoofing (CVE-2026-64730)
      * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash     (CVE-2026-64757)
      * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash     (CVE-2026-64783)
      * webkitgtk: use-after-free of JSCValue function parameters (CVE-2026-78376)
      * chromium-browser: Skia: Information disclosure via out-of-bounds read in crafted media file     (CVE-2026-79020)
      * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash     (CVE-2026-43795)
      * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash     (CVE-2026-64715)
      * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash     (CVE-2026-64718)
      * webkitgtk: Visiting a maliciously crafted website may leak sensitive data (CVE-2026-64778)
      * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash     (CVE-2026-64779)
      * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash     (CVE-2026-64780)
      * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash     (CVE-2026-64782)
      * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash     (CVE-2026-64784)
      * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash     (CVE-2026-65331)
      * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash     (CVE-2026-65332)
      * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash     (CVE-2026-65334)
      * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash     (CVE-2026-65335)
      * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash     (CVE-2026-65336)
      * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash     (CVE-2026-65337)
      * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash     (CVE-2026-65338)
      * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash     (CVE-2026-65340)
      * webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2026-65341)
      * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash     (CVE-2026-65351)
      * webkitgtk: Validate the full FeatureList array once in OpenTypeVerticalData findFeature     (CVE-2026-83596)
      * chromium-browser: skia: chromium-browser: Information leak in Skia (CVE-2026-84359)
      * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process termination     (CVE-2026-84635)
      * webkitgtk: Processing maliciously crafted web content may disclose sensitive user information     (CVE-2026-64753)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Google Chrome installed on the remote macOS host is prior to 149.0.7827.53. It is, therefore, affected by multiple vulnerabilities as referenced in the 2026_06_stable-channel-update-for-desktop advisory.

  - Use after free in PDFium in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute     arbitrary code inside a sandbox via a crafted PDF file. (Chromium security severity: Low) (CVE-2026-11303,     CVE-2026-11305, CVE-2026-11306, CVE-2026-11307)

  - Insufficient validation of untrusted input in Enterprise Reporting in Google Chrome prior to 149.0.7827.53     allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape     via a crafted HTML page. (Chromium security severity: Medium) (CVE-2026-11120)

  - Out of bounds read and write in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to     potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)     (CVE-2026-10881)

  - Use after free in Network in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute     arbitrary code via a crafted HTML page. (Chromium security severity: Critical) (CVE-2026-10882)

  - Type Confusion in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical) (CVE-2026-10883)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the a188c081-9ce8-11f1-8fc6-cb9659fdabad advisory.

    Qt qtwebengine-chromium repo reports:
    Backports for 747 security bugs in Chromium:

Tenable has extracted the preceding description block directly from the FreeBSD security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak     cross-origin data via a crafted HTML page. (Chromium security severity: Medium) (CVE-2026-11110)

Note that Nessus relies on the presence of the package as reported by the vendor.

The version of Microsoft Edge installed on the remote Windows host is prior to 149.0.4022.52. It is, therefore, affected by multiple vulnerabilities as referenced in the June 5, 2026 advisory.

  - Insufficient validation of untrusted input in Enterprise Reporting in Google Chrome prior to 149.0.7827.53     allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape     via a crafted HTML page. (Chromium security severity: Medium) (CVE-2026-11120)

  - Out of bounds read and write in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to     potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)     (CVE-2026-10881)

  - Use after free in Network in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute     arbitrary code via a crafted HTML page. (Chromium security severity: Critical) (CVE-2026-10882)

  - Use after free in Chromecast in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had     compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
    (Chromium security severity: Critical) (CVE-2026-10884)

  - Use after free in FileSystem in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to     potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)     (CVE-2026-10886)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
348734	AlmaLinux 9 : webkit2gtk3 (ALSA-2026:69098)	Nessus	Alma Linux Local Security Checks	2026/9/22	2026/10/1	critical
358443	RockyLinux 8 : webkit2gtk3 (RLSA-2026:74084)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/2	critical
362401	AlmaLinux 8 : webkit2gtk3 (ALSA-2026:74084)	Nessus	Alma Linux Local Security Checks	2026/10/1	2026/10/2	critical
363124	MiracleLinux 8 : webkit2gtk3-2.54.0-1.el8_10.ML.1 (AXSA:2026-1970:09)	Nessus	Miracle Linux Local Security Checks	2026/10/6	2026/10/9	critical
342586	openSUSE 16 Security Update : chromium (openSUSE-SU-2026:21135-1)	Nessus	SuSE Local Security Checks	2026/9/3	2026/9/9	critical
353421	RHEL 8 : webkit2gtk3 (RHSA-2026:74084)	Nessus	Red Hat Local Security Checks	2026/9/30	2026/10/2	critical
319296	Google Chrome < 149.0.7827.53 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	2026/6/6	2026/6/8	critical
338718	FreeBSD : qt6-webengine -- multiple vulnerabilities (a188c081-9ce8-11f1-8fc6-cb9659fdabad)	Nessus	FreeBSD Local Security Checks	2026/8/21	2026/9/9	critical
319164	Linux Distros Unpatched Vulnerability : CVE-2026-11110	Nessus	Misc.	2026/6/5	2026/10/13	medium
329369	Microsoft Edge (Chromium) < 149.0.4022.52 Multiple Vulnerabilities	Nessus	Windows	2026/7/24	2026/7/24	critical

検出

プラグインの検索

critical

critical

critical

critical

critical

critical

critical

critical

medium

critical