Inappropriate implementation in Service Worker API in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:0019-1 advisory.

  - Use after free in Safe browsing. (CVE-2022-0289)

  - Use after free in Site isolation. (CVE-2022-0290)

  - Inappropriate implementation in Storage. (CVE-2022-0291)

  - Inappropriate implementation in Fenced Frames. (CVE-2022-0292)

  - Use after free in Web packaging. (CVE-2022-0293)

  - Inappropriate implementation in Push messaging. (CVE-2022-0294)

  - Use after free in Omnibox. (CVE-2022-0295, CVE-2022-0302)

  - Use after free in Printing. (CVE-2022-0296)

  - Use after free in Vulkan. (CVE-2022-0297)

  - Use after free in Scheduling. (CVE-2022-0298)

  - Use after free in Text Input Method Editor. (CVE-2022-0300)

  - Heap buffer overflow in DevTools. (CVE-2022-0301)

  - Race in GPU Watchdog. (CVE-2022-0303)

  - Use after free in Bookmarks. (CVE-2022-0304)

  - Inappropriate implementation in Service Worker API. (CVE-2022-0305)

  - Heap buffer overflow in PDFium. (CVE-2022-0306)

  - Use after free in Optimization Guide. (CVE-2022-0307)

  - Use after free in Data Transfer. (CVE-2022-0308)

  - Inappropriate implementation in Autofill. (CVE-2022-0309)

  - Heap buffer overflow in Task Manager. (CVE-2022-0310, CVE-2022-0311)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Google Chrome installed on the remote Windows host is prior to 97.0.4692.99. It is, therefore, affected by multiple vulnerabilities as referenced in the 2022_01_stable-channel-update-for-desktop_19 advisory.

  - Use after free in Data Transfer in Google Chrome on Chrome OS prior to 97.0.4692.99 allowed a remote     attacker who convinced a user to engage in specific user interaction to potentially exploit heap     corruption via a crafted HTML page. (CVE-2022-0308)

  - Use after free in Safe browsing in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2022-0289)

  - Use after free in Site isolation in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to     potentially perform a sandbox escape via a crafted HTML page. (CVE-2022-0290)

  - Inappropriate implementation in Storage in Google Chrome prior to 97.0.4692.99 allowed a remote attacker     who had compromised the renderer process to bypass site isolation via a crafted HTML page. (CVE-2022-0291)

  - Inappropriate implementation in Fenced Frames in Google Chrome prior to 97.0.4692.99 allowed a remote     attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML     page. (CVE-2022-0292)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Google Chrome installed on the remote macOS host is prior to 97.0.4692.99. It is, therefore, affected by multiple vulnerabilities as referenced in the 2022_01_stable-channel-update-for-desktop_19 advisory.

  - Use after free in Data Transfer in Google Chrome on Chrome OS prior to 97.0.4692.99 allowed a remote     attacker who convinced a user to engage in specific user interaction to potentially exploit heap     corruption via a crafted HTML page. (CVE-2022-0308)

  - Use after free in Safe browsing in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2022-0289)

  - Use after free in Site isolation in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to     potentially perform a sandbox escape via a crafted HTML page. (CVE-2022-0290)

  - Inappropriate implementation in Storage in Google Chrome prior to 97.0.4692.99 allowed a remote attacker     who had compromised the renderer process to bypass site isolation via a crafted HTML page. (CVE-2022-0291)

  - Inappropriate implementation in Fenced Frames in Google Chrome prior to 97.0.4692.99 allowed a remote     attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML     page. (CVE-2022-0292)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
157241	GLSA-202201-02 : Chromium, Google Chrome: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	critical
157082	openSUSE 15 Security Update : chromium (openSUSE-SU-2022:0019-1)	Nessus	SuSE Local Security Checks	critical
156862	Google Chrome < 97.0.4692.99 Multiple Vulnerabilities	Nessus	Windows	critical
156861	Google Chrome < 97.0.4692.99 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	critical

Detections

Analytics

CVE-2022-0305

medium

Tenable Plugins

critical

critical

critical

critical