The version of Microsoft Edge installed on the remote Windows host is prior to 109.0.1518.49 / 108.0.1462.83. It is, therefore, affected by multiple vulnerabilities as referenced in the January 12, 2023 advisory.

  - Heap buffer overflow in Network Service in Google Chrome prior to 109.0.5414.74 allowed an attacker who     convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted     HTML page and specific interactions. (Chromium security severity: High) (CVE-2023-0129)

  - Inappropriate implementation in in Fullscreen API in Google Chrome on Android prior to 109.0.5414.74     allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
    (Chromium security severity: Medium) (CVE-2023-0130)

  - Inappropriate implementation in in iframe Sandbox in Google Chrome prior to 109.0.5414.74 allowed a remote     attacker to bypass file download restrictions via a crafted HTML page. (Chromium security severity:
    Medium) (CVE-2023-0131)

  - Inappropriate implementation in in Permission prompts in Google Chrome on Windows prior to 109.0.5414.74     allowed a remote attacker to force acceptance of a permission prompt via a crafted HTML page. (Chromium     security severity: Medium) (CVE-2023-0132)

  - Inappropriate implementation in in Permission prompts in Google Chrome on Android prior to 109.0.5414.74     allowed a remote attacker to bypass main origin permission delegation via a crafted HTML page. (Chromium     security severity: Medium) (CVE-2023-0133)

  - Use after free in Cart in Google Chrome prior to 109.0.5414.74 allowed an attacker who convinced a user to     install a malicious extension to potentially exploit heap corruption via database corruption and a crafted     HTML page. (Chromium security severity: Medium) (CVE-2023-0134, CVE-2023-0135)

  - Inappropriate implementation in in Fullscreen API in Google Chrome on Android prior to 109.0.5414.74     allowed a remote attacker to execute incorrect security UI via a crafted HTML page. (Chromium security     severity: Medium) (CVE-2023-0136)

  - Heap buffer overflow in libphonenumber in Google Chrome prior to 109.0.5414.74 allowed a remote attacker     to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Low)     (CVE-2023-0138)

  - Insufficient validation of untrusted input in Downloads in Google Chrome on Windows prior to 109.0.5414.74     allowed a remote attacker to bypass download restrictions via a crafted HTML page. (Chromium security     severity: Low) (CVE-2023-0139)

  - Inappropriate implementation in in File System API in Google Chrome on Windows prior to 109.0.5414.74     allowed a remote attacker to bypass file system restrictions via a crafted HTML page. (Chromium security     severity: Low) (CVE-2023-0140)

  - Insufficient policy enforcement in CORS in Google Chrome prior to 109.0.5414.74 allowed a remote attacker     to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low) (CVE-2023-0141)

  - Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability. (CVE-2023-21775)

  - Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability. This CVE ID is unique from     CVE-2023-21795. (CVE-2023-21796)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Microsoft Edge (Chromium) < 109.0.1518.49 / 108.0.1462.83 Multiple Vulnerabilities

high Nessus Plugin ID 170007

Version 1.7

Version 1.6

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.0

Version 1.7 Oct 24, 2023, 4:27 PM CVSSv2 score source (changed from "CVE-2023-0135" to "CVE-2023-0138") CVSSv3 score source (changed from "CVE-2023-0138" to "None") Plugin Feed: 202310241627
Version 1.6 Feb 10, 2023, 8:02 PM CVE (set "CVE" coverage to "CVE-2023-21775,CVE-2023-21796") CVSS metrics ("CVSSv3 score" changed from "8.8" to "9.8") CVSS metrics ("CVSSv3 vector" changed from "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" to "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H") CVSS temporal metrics ("CVSSv3 temporal score" set to "8.5") Plugin metadata Plugin Feed: 202302102002
Version 1.5 Feb 9, 2023, 6:10 PM IAVM reference Plugin Feed: 202302091810
Version 1.4 Jan 26, 2023, 7:16 PM IAVM reference Plugin Feed: 202301261916
Version 1.3 Jan 20, 2023, 12:00 PM IAVM reference Plugin Feed: 202301201200
Version 1.2 Jan 18, 2023, 4:10 PM CVSS metrics ("CVSSv3 score" changed from "9.8" to "8.8") CVSS metrics ("CVSSv3 vector" changed from "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" to "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H") CVSSv3 score source (set to "CVE-2023-0138") Plugin Feed: 202301181610
Version 1.1 Jan 13, 2023, 4:18 PM STIG Severity (set to "I") IAVM reference Plugin Feed: 202301131618
Version 1.0 Jan 13, 2023, 7:47 AM New Plugin Feed: 202301130747