Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in

Google Chrome < 154.0.8037.57 Multiple Vulnerabilities

🗓️ 22 Sep 2026 00:00:00Reported by TenableType 
nessus
 nessus🔗 www.tenable.com👁 2 Views

Multiple vulnerabilities in Google Chrome < 154.0.8037.57 affect DevTools and other components.

Related
Refs
Code
ReporterTitlePublishedViews
Family
circl
Circl		CVE-2026-95274
23 Sep 202604:45
–circl
circl
Circl		CVE-2026-95275
23 Sep 202604:45
–circl
circl
Circl		CVE-2026-95276
23 Sep 202604:45
–circl
circl
Circl		CVE-2026-95277
23 Sep 202604:45
–circl
circl
Circl		CVE-2026-95278
23 Sep 202604:45
–circl
circl
Circl		CVE-2026-95279
23 Sep 202604:45
–circl
circl
Circl		CVE-2026-95280
23 Sep 202604:45
–circl
circl
Circl		CVE-2026-95281
23 Sep 202604:45
–circl
circl
Circl		CVE-2026-95282
23 Sep 202604:45
–circl
circl
Circl		CVE-2026-95283
23 Sep 202604:45
–circl
Rows per page
#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(349091);
  script_version("1.1");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/09/22");

  script_cve_id(
    "CVE-2026-95274",
    "CVE-2026-95275",
    "CVE-2026-95276",
    "CVE-2026-95277",
    "CVE-2026-95278",
    "CVE-2026-95279",
    "CVE-2026-95280",
    "CVE-2026-95281",
    "CVE-2026-95282",
    "CVE-2026-95283",
    "CVE-2026-95284",
    "CVE-2026-95285",
    "CVE-2026-95286",
    "CVE-2026-95287",
    "CVE-2026-95288",
    "CVE-2026-95289",
    "CVE-2026-95290",
    "CVE-2026-95291",
    "CVE-2026-95292",
    "CVE-2026-95293",
    "CVE-2026-95294",
    "CVE-2026-95295",
    "CVE-2026-95296",
    "CVE-2026-95297",
    "CVE-2026-95298",
    "CVE-2026-95299",
    "CVE-2026-95300",
    "CVE-2026-95301",
    "CVE-2026-95302",
    "CVE-2026-95303",
    "CVE-2026-95304",
    "CVE-2026-95305",
    "CVE-2026-95306",
    "CVE-2026-95307",
    "CVE-2026-95308",
    "CVE-2026-95309",
    "CVE-2026-95310",
    "CVE-2026-95311",
    "CVE-2026-95312",
    "CVE-2026-95313",
    "CVE-2026-95314",
    "CVE-2026-95315",
    "CVE-2026-95316",
    "CVE-2026-95317",
    "CVE-2026-95318",
    "CVE-2026-95319",
    "CVE-2026-95320",
    "CVE-2026-95321",
    "CVE-2026-95322",
    "CVE-2026-95323",
    "CVE-2026-95324",
    "CVE-2026-95325",
    "CVE-2026-95326",
    "CVE-2026-95327",
    "CVE-2026-95328",
    "CVE-2026-95329",
    "CVE-2026-95330",
    "CVE-2026-95331",
    "CVE-2026-95332",
    "CVE-2026-95333",
    "CVE-2026-95334",
    "CVE-2026-95335",
    "CVE-2026-95336",
    "CVE-2026-95337",
    "CVE-2026-95338",
    "CVE-2026-95339",
    "CVE-2026-95340",
    "CVE-2026-95341",
    "CVE-2026-95342",
    "CVE-2026-95343",
    "CVE-2026-95344",
    "CVE-2026-95345",
    "CVE-2026-95346",
    "CVE-2026-95347",
    "CVE-2026-95348",
    "CVE-2026-95349",
    "CVE-2026-95350",
    "CVE-2026-95351",
    "CVE-2026-95352",
    "CVE-2026-95353",
    "CVE-2026-95354",
    "CVE-2026-95355",
    "CVE-2026-95356",
    "CVE-2026-95357",
    "CVE-2026-95358",
    "CVE-2026-95359",
    "CVE-2026-95360",
    "CVE-2026-95361",
    "CVE-2026-95362",
    "CVE-2026-95363",
    "CVE-2026-95364",
    "CVE-2026-95365",
    "CVE-2026-95366",
    "CVE-2026-95367",
    "CVE-2026-95368",
    "CVE-2026-95369",
    "CVE-2026-95370",
    "CVE-2026-95371",
    "CVE-2026-95372",
    "CVE-2026-95373",
    "CVE-2026-95374",
    "CVE-2026-95375",
    "CVE-2026-95376",
    "CVE-2026-95380",
    "CVE-2026-95381",
    "CVE-2026-95382",
    "CVE-2026-95384",
    "CVE-2026-95385"
  );

  script_name(english:"Google Chrome < 154.0.8037.57 Multiple Vulnerabilities");

  script_set_attribute(attribute:"synopsis", value:
"A web browser installed on the remote Windows host is affected by multiple vulnerabilities.");
  script_set_attribute(attribute:"description", value:
"The version of Google Chrome installed on the remote Windows host is prior to 154.0.8037.57. It is, therefore, affected
by multiple vulnerabilities as referenced in the 2026_09_stable-channel-update-for-desktop_0856730748 advisory.

  - Use after free in DevTools. (CVE-2026-95373)

  - Improper output encoding in DevTools. (CVE-2026-95274)

  - Incorrect reference resolution in MediaStream. (CVE-2026-95275)

  - Improper input validation in Themes. (CVE-2026-95276)

  - Use after free in Views. (CVE-2026-95277, CVE-2026-95351)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version
number.");
  # https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?ee687902");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/551573368");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/530045332");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/548585299");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/551708184");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/552665794");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/553172761");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/556435507");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/556576992");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/559320837");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/560439699");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/562151598");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/540265100");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/543471693");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/508462481");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/517661385");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/520516206");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/534997484");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/537857253");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/543141419");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/550953039");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/553116160");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/553129513");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/553130481");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/553136141");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/554558320");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/555299641");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/556535630");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/556576976");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/557523002");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/558764482");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/559815527");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/560406548");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/560536731");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/560536735");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/561997427");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/562242429");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/495529018");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/497204165");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/497212105");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/497603247");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/500127519");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/501648493");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/502179319");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/502242455");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/511791538");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/513049042");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/513134076");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/513162143");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/513992281");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/514019137");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/514059630");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/514072284");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/514487499");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/516404074");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/517163294");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/517417437");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/517442714");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/517584808");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/517596255");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/517730821");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/517802696");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/520504291");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/522061704");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/522344883");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/523719002");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/524582798");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/526550688");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/532962621");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/536161355");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/536648933");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/542926849");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/543464436");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/545449081");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/545879261");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/546438368");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/546639650");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/547832510");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/548611433");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/549911100");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/550181232");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/553123003");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/553141660");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/559682346");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/423956129");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/497094708");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/497344014");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/502077689");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/513403696");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/513714849");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/513781838");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/513791872");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/514012689");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/514524620");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/517192965");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/522413520");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/523765972");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/533041383");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/533074595");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/533095855");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/533102653");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/534579660");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/547027738");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/551296612");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/552023752");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/553148673");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/553268567");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/553271219");
  script_set_attribute(attribute:"see_also", value:"https://crbug.com/553921181");
  script_set_attribute(attribute:"solution", value:
"Upgrade to Google Chrome version 154.0.8037.57 or later.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2026-95373");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"false");

  script_set_attribute(attribute:"vuln_publication_date", value:"2026/09/22");
  script_set_attribute(attribute:"patch_publication_date", value:"2026/09/22");
  script_set_attribute(attribute:"plugin_publication_date", value:"2026/09/22");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:google:chrome");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_set_attribute(attribute:"thorough_tests", value:"true");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Windows");

  script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("google_chrome_installed.nasl", "smb_hotfixes.nasl");
  script_require_keys("installed_sw/Google Chrome");

  exit(0);
}

include('vdf.inc');
include('smb_hotfixes.inc');

# @tvdl-content-verify-only
var vuln_data = {
  "metadata": {
    "spec_version": "1.0"
  },
  "requires": [
    {
      "scope": "target",
      "match": {
        "os": "windows"
      }
    },
    {
      "scope": "target",
      "match": {
        "os_version": "10"
      }
    },
    {
      "scope": "target",
      "match": {
        "sp": "0"
      }
    }
  ],
  "checks": [
    {
      "product": {
        "name": "Google Chrome",
        "type": "app"
      },
      "check_algorithm": "default",
      "constraints": [
        {
          "fixed_version": "154.0.8037.57",
          "fixed_display": "154.0.8037.57/.58"
        }
      ]
    }
  ]
};

var vdf_result = vdf::check_and_report(vuln_data:vuln_data, severity:SECURITY_HOLE);
vdf::handle_check_and_report_errors(vdf_result:vdf_result);

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
22 Sep 2026 00:00Current
6.5Medium risk
Vulners AI Score6.5
Google ChromeDevToolsUse after freeImproper output encodingMediaStreamThemesViews
2