
Please review the referenced CVE identifiers for details.


The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:0019-1 advisory.

  - Use after free in Safe browsing. (CVE-2022-0289)

  - Use after free in Site isolation. (CVE-2022-0290)

  - Inappropriate implementation in Storage. (CVE-2022-0291)

  - Inappropriate implementation in Fenced Frames. (CVE-2022-0292)

  - Use after free in Web packaging. (CVE-2022-0293)

  - Inappropriate implementation in Push messaging. (CVE-2022-0294)

  - Use after free in Omnibox. (CVE-2022-0295, CVE-2022-0302)

  - Use after free in Printing. (CVE-2022-0296)

  - Use after free in Vulkan. (CVE-2022-0297)

  - Use after free in Scheduling. (CVE-2022-0298)

  - Use after free in Text Input Method Editor. (CVE-2022-0300)

  - Heap buffer overflow in DevTools. (CVE-2022-0301)

  - Race in GPU Watchdog. (CVE-2022-0303)

  - Use after free in Bookmarks. (CVE-2022-0304)

  - Inappropriate implementation in Service Worker API. (CVE-2022-0305)

  - Heap buffer overflow in PDFium. (CVE-2022-0306)

  - Use after free in Optimization Guide. (CVE-2022-0307)

  - Use after free in Data Transfer. (CVE-2022-0308)

  - Inappropriate implementation in Autofill. (CVE-2022-0309)

  - Heap buffer overflow in Task Manager. (CVE-2022-0310, CVE-2022-0311)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
157241	GLSA-202201-02 : Chromium, Google Chrome: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	critical
157082	openSUSE 15 Security Update : chromium (openSUSE-SU-2022:0019-1)	Nessus	SuSE Local Security Checks	critical

Detections

Analytics

CVE-2022-0303

high

Tenable Plugins

critical

critical