The version of Microsoft Edge installed on the remote Windows host is prior to 108.0.1462.54. It is, therefore, affected by multiple vulnerabilities as referenced in the December 16, 2022 advisory.

  - Use after free in Blink Media in Google Chrome prior to 108.0.5359.124 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)     (CVE-2022-4436)

  - Use after free in Mojo IPC in Google Chrome prior to 108.0.5359.124 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)     (CVE-2022-4437)

  - Use after free in Blink Frames in Google Chrome prior to 108.0.5359.124 allowed a remote attacker who     convinced the user to engage in specific UI interactions to potentially exploit heap corruption via a     crafted HTML page. (Chromium security severity: High) (CVE-2022-4438)

  - Use after free in Aura in Google Chrome on Windows prior to 108.0.5359.124 allowed a remote attacker who     convinced the user to engage in specific UI interactions to potentially exploit heap corruption via     specific UI interactions. (Chromium security severity: High) (CVE-2022-4439)

  - Use after free in Profiles in Google Chrome prior to 108.0.5359.124 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)     (CVE-2022-4440)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Microsoft Edge (Chromium) < 108.0.1462.54 Multiple Vulnerabilities

high Nessus Plugin ID 168877

Version 1.3

Version 1.2

Version 1.1

Version 1.0

Version 1.3 Feb 10, 2023, 8:02 PM Plugin metadata IAVM reference Plugin Feed: 202302102002
Version 1.2 Jan 19, 2023, 6:11 PM IAVM reference Plugin Feed: 202301191811
Version 1.1 Jan 6, 2023, 12:01 PM STIG Severity (set to "I") IAVM reference Plugin Feed: 202301061201
Version 1.0 Dec 16, 2022, 11:53 PM New Plugin Feed: 202212162353