The version of Google Chrome installed on the remote macOS host is prior to 112.0.5615.137. It is, therefore, affected by multiple vulnerabilities as referenced in the 2023_04_stable-channel-update-for-desktop_18 advisory.

  - Out of bounds memory access in Service Worker API in Google Chrome prior to 112.0.5615.137 allowed a     remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security     severity: High) (CVE-2023-2133, CVE-2023-2134)

  - Use after free in DevTools in Google Chrome prior to 112.0.5615.137 allowed a remote attacker who     convinced a user to enable specific preconditions to potentially exploit heap corruption via a crafted     HTML page. (Chromium security severity: High) (CVE-2023-2135)

  - Integer overflow in Skia in Google Chrome prior to 112.0.5615.137 allowed a remote attacker who had     compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
    (Chromium security severity: High) (CVE-2023-2136)

  - Heap buffer overflow in sqlite in Google Chrome prior to 112.0.5615.137 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)     (CVE-2023-2137)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Google Chrome < 112.0.5615.137 Multiple Vulnerabilities

critical Nessus Plugin ID 174479

Version 1.3