Google Chrome < 154.0.8037.57 多个漏洞

critical Nessus 插件 ID 349092

简介

远程 macOS 主机上安装的 Web 浏览器受到多个漏洞的影响。

描述

远程 macOS 主机上安装的 Google Chrome 版本低于 154.0.8037.57。因此,如公告 2026_09_stable-channel-update-for-desktop_0856730748 所述,受到多个漏洞的影响。

- DevTools 中存在释放后使用漏洞。(CVE-2026-95373)

- DevTools 中错误的输出编码。(CVE-2026-95274)

- MediaStream 中错误的引用解析。(CVE-2026-95275)

- 主题中错误的输入验证。(CVE-2026-95276)

- Views 中的释放后使用。(CVE-2026-95277, CVE-2026-95351)

请注意,Nessus 尚未测试这些问题,而是只依据应用程序自我报告的版本号进行判断。

解决方案

升级至 Google Chrome 154.0.8037.57 或更高版本。

另见

https://crbug.com/423956129

https://crbug.com/495529018

https://crbug.com/497094708

https://crbug.com/497204165

https://crbug.com/497212105

https://crbug.com/497344014

https://crbug.com/497603247

https://crbug.com/500127519

https://crbug.com/501648493

https://crbug.com/502077689

https://crbug.com/502179319

https://crbug.com/502242455

https://crbug.com/508462481

https://crbug.com/511791538

https://crbug.com/513049042

https://crbug.com/513134076

https://crbug.com/513162143

https://crbug.com/513403696

https://crbug.com/513714849

https://crbug.com/513781838

https://crbug.com/513791872

https://crbug.com/513992281

https://crbug.com/514012689

https://crbug.com/514019137

https://crbug.com/514059630

https://crbug.com/514072284

https://crbug.com/514487499

https://crbug.com/514524620

https://crbug.com/516404074

https://crbug.com/517163294

https://crbug.com/517192965

https://crbug.com/517417437

https://crbug.com/517442714

https://crbug.com/517584808

https://crbug.com/517596255

https://crbug.com/517661385

https://crbug.com/517730821

https://crbug.com/517802696

https://crbug.com/520504291

https://crbug.com/520516206

https://crbug.com/522061704

https://crbug.com/522344883

https://crbug.com/522413520

https://crbug.com/523719002

https://crbug.com/523765972

https://crbug.com/524582798

https://crbug.com/526550688

https://crbug.com/530045332

https://crbug.com/532962621

https://crbug.com/533041383

https://crbug.com/533074595

https://crbug.com/533095855

https://crbug.com/533102653

https://crbug.com/534579660

https://crbug.com/534997484

https://crbug.com/536161355

https://crbug.com/536648933

https://crbug.com/537857253

https://crbug.com/540265100

https://crbug.com/542926849

https://crbug.com/543141419

https://crbug.com/543464436

https://crbug.com/543471693

https://crbug.com/545449081

https://crbug.com/545879261

https://crbug.com/546438368

https://crbug.com/546639650

https://crbug.com/547027738

https://crbug.com/547832510

https://crbug.com/548585299

https://crbug.com/548611433

https://crbug.com/549911100

https://crbug.com/550181232

https://crbug.com/550953039

https://crbug.com/551296612

https://crbug.com/551573368

https://crbug.com/551708184

https://crbug.com/552023752

https://crbug.com/552665794

https://crbug.com/553116160

https://crbug.com/553123003

https://crbug.com/553129513

https://crbug.com/553130481

https://crbug.com/553136141

https://crbug.com/553141660

https://crbug.com/553148673

https://crbug.com/553172761

https://crbug.com/553268567

https://crbug.com/553271219

https://crbug.com/553921181

https://crbug.com/554558320

https://crbug.com/555299641

https://crbug.com/556435507

https://crbug.com/556535630

https://crbug.com/556576976

https://crbug.com/556576992

https://crbug.com/557523002

https://crbug.com/558764482

https://crbug.com/559320837

https://crbug.com/559682346

https://crbug.com/559815527

https://crbug.com/560406548

https://crbug.com/560439699

https://crbug.com/560536731

https://crbug.com/560536735

https://crbug.com/561997427

https://crbug.com/562151598

https://crbug.com/562242429

http://www.nessus.org/u?ee687902

插件详情

严重性: Critical

ID: 349092

文件名: macosx_google_chrome_154_0_8037_57.nasl

版本: 1.1

类型: Local

代理: macosx

发布时间: 2026/9/22

最近更新时间: 2026/9/22

支持的传感器: Frictionless Assessment Agent, Frictionless Assessment AWS, Frictionless Assessment Azure, Nessus Agent, Tenable Cloud Security, Tenable Self-Hosted Container Security, Nessus

风险信息

VPR

风险因素: Medium

分数: 6.9

百分位: 96.53

CVSS v2

风险因素: Critical

基本分数: 10

时间分数: 7.4

矢量: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS 分数来源: CVE-2026-95373

CVSS v3

风险因素: Critical

基本分数: 9.8

时间分数: 8.5

矢量: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

时间矢量: CVSS:3.0/E:U/RL:O/RC:C

漏洞信息

CPE: cpe:/a:google:chrome

必需的 KB 项: installed_sw/Google Chrome

易利用性: No known exploits are available

补丁发布日期: 2026/9/22

漏洞发布日期: 2026/9/22

参考资料信息

CVE: CVE-2026-95274, CVE-2026-95275, CVE-2026-95276, CVE-2026-95277, CVE-2026-95278, CVE-2026-95279, CVE-2026-95280, CVE-2026-95281, CVE-2026-95282, CVE-2026-95283, CVE-2026-95284, CVE-2026-95285, CVE-2026-95286, CVE-2026-95287, CVE-2026-95288, CVE-2026-95289, CVE-2026-95290, CVE-2026-95291, CVE-2026-95292, CVE-2026-95293, CVE-2026-95294, CVE-2026-95295, CVE-2026-95296, CVE-2026-95297, CVE-2026-95298, CVE-2026-95299, CVE-2026-95300, CVE-2026-95301, CVE-2026-95302, CVE-2026-95303, CVE-2026-95304, CVE-2026-95305, CVE-2026-95306, CVE-2026-95307, CVE-2026-95308, CVE-2026-95309, CVE-2026-95310, CVE-2026-95311, CVE-2026-95312, CVE-2026-95313, CVE-2026-95314, CVE-2026-95315, CVE-2026-95316, CVE-2026-95317, CVE-2026-95318, CVE-2026-95319, CVE-2026-95320, CVE-2026-95321, CVE-2026-95322, CVE-2026-95323, CVE-2026-95324, CVE-2026-95325, CVE-2026-95326, CVE-2026-95327, CVE-2026-95328, CVE-2026-95329, CVE-2026-95330, CVE-2026-95331, CVE-2026-95332, CVE-2026-95333, CVE-2026-95334, CVE-2026-95335, CVE-2026-95336, CVE-2026-95337, CVE-2026-95338, CVE-2026-95339, CVE-2026-95340, CVE-2026-95341, CVE-2026-95342, CVE-2026-95343, CVE-2026-95344, CVE-2026-95345, CVE-2026-95346, CVE-2026-95347, CVE-2026-95348, CVE-2026-95349, CVE-2026-95350, CVE-2026-95351, CVE-2026-95352, CVE-2026-95353, CVE-2026-95354, CVE-2026-95355, CVE-2026-95356, CVE-2026-95357, CVE-2026-95358, CVE-2026-95359, CVE-2026-95360, CVE-2026-95361, CVE-2026-95362, CVE-2026-95363, CVE-2026-95364, CVE-2026-95365, CVE-2026-95366, CVE-2026-95367, CVE-2026-95368, CVE-2026-95369, CVE-2026-95370, CVE-2026-95371, CVE-2026-95372, CVE-2026-95373, CVE-2026-95374, CVE-2026-95375, CVE-2026-95376, CVE-2026-95380, CVE-2026-95381, CVE-2026-95382, CVE-2026-95384, CVE-2026-95385