Inappropriate implementation in Autofill in Google Chrome prior to 131.0.6778.69 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

The version of Google Chrome installed on the remote macOS host is prior to 131.0.6778.69. It is, therefore, affected by multiple vulnerabilities as referenced in the 2024_11_stable-channel-update-for-desktop_12 advisory.

  - Inappropriate implementation in Blink. (CVE-2024-11110)

  - Inappropriate implementation in Autofill. (CVE-2024-11111)

  - Use after free in Media. (CVE-2024-11112)

  - Use after free in Accessibility. (CVE-2024-11113)

  - Inappropriate implementation in Views. (CVE-2024-11114)

  - Insufficient policy enforcement in Navigation. (CVE-2024-11115)

  - Inappropriate implementation in Paint. (CVE-2024-11116)

  - Inappropriate implementation in FileSystem. (CVE-2024-11117)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Google Chrome installed on the remote Windows host is prior to 131.0.6778.69. It is, therefore, affected by multiple vulnerabilities as referenced in the 2024_11_stable-channel-update-for-desktop_12 advisory.

  - Inappropriate implementation in Blink. (CVE-2024-11110)

  - Inappropriate implementation in Autofill. (CVE-2024-11111)

  - Use after free in Media. (CVE-2024-11112)

  - Use after free in Accessibility. (CVE-2024-11113)

  - Inappropriate implementation in Views. (CVE-2024-11114)

  - Insufficient policy enforcement in Navigation. (CVE-2024-11115)

  - Inappropriate implementation in Paint. (CVE-2024-11116)

  - Inappropriate implementation in FileSystem. (CVE-2024-11117)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
210779	Google Chrome < 131.0.6778.69 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	critical
210778	Google Chrome < 131.0.6778.69 Multiple Vulnerabilities	Nessus	Windows	critical

Detections

Analytics

CVE-2024-11111

medium

Tenable Plugins

critical

critical