The version of Google Chrome installed on the remote macOS host is prior to 120.0.6099.109. It is, therefore, affected by multiple vulnerabilities as referenced in the 2023_12_stable-channel-update-for-desktop_12 advisory.

  - Type confusion in V8 in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2023-6702)

  - Use after free in Blink in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2023-6703)

  - Use after free in libavif in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to     potentially exploit heap corruption via a crafted image file. (Chromium security severity: High)     (CVE-2023-6704)

  - Use after free in WebRTC in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2023-6705)

  - Use after free in FedCM in Google Chrome prior to 120.0.6099.109 allowed a remote attacker who convinced a     user to engage in specific UI interaction to potentially exploit heap corruption via a crafted HTML page.
    (Chromium security severity: High) (CVE-2023-6706)

  - Use after free in CSS in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) (CVE-2023-6707)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Google Chrome < 120.0.6099.109 Multiple Vulnerabilities

high Nessus Plugin ID 186792

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.0

Version 1.4 May 3, 2024, 10:26 PM Plugin metadata Plugin Feed: 202405032226
Version 1.3 Dec 22, 2023, 10:57 AM IAVM reference Plugin Feed: 202312221057
Version 1.2 Dec 18, 2023, 2:01 PM CVSS metrics ("CVSSv3 score" set to 8.8. "CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H") Plugin Feed: 202312181401
Version 1.1 Dec 15, 2023, 12:19 PM IAVM reference STIG Severity (set to "I") Plugin Feed: 202312151219
Version 1.0 Dec 13, 2023, 3:42 AM New Plugin Feed: 202312130342