The version of Microsoft Edge installed on the remote Windows host is prior to 107.0.1418.42. It is, therefore, affected by multiple vulnerabilities as referenced in the November 10, 2022 advisory.

  - Use after free in V8 in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2022-3885)

  - Use after free in Speech Recognition in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)     (CVE-2022-3886)

  - Use after free in Web Workers in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)     (CVE-2022-3887)

  - Use after free in WebCodecs in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)     (CVE-2022-3888)

  - Type confusion in V8 in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2022-3889)

  - Heap buffer overflow in Crashpad in Google Chrome on Android prior to 107.0.5304.106 allowed a remote     attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted     HTML page. (Chromium security severity: High) (CVE-2022-3890)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Microsoft Edge (Chromium) < 107.0.1418.42 Multiple Vulnerabilities

critical Nessus Plugin ID 167274

Version 1.6

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.6 Oct 25, 2023, 5:17 PM CVSSv2 score source (changed from "CVE-2022-3888" to "CVE-2022-3890") CVSSv3 score source (changed from "CVE-2022-3890" to "None") Plugin Feed: 202310251717
Version 1.5 Feb 10, 2023, 8:02 PM Plugin metadata Plugin Feed: 202302102002
Version 1.4 Dec 1, 2022, 5:53 PM IAVM reference Plugin Feed: 202212011753
Version 1.3 Nov 17, 2022, 9:58 PM IAVM reference STIG Severity Plugin Feed: 202211172158
Version 1.2 Nov 11, 2022, 1:53 AM New Plugin Feed: 202211110153