The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5577 advisory.

  - Use after free in FedCM in Google Chrome prior to 120.0.6099.109 allowed a remote attacker who convinced a     user to engage in specific UI interaction to potentially exploit heap corruption via a crafted HTML page.
    (Chromium security severity: High) (CVE-2023-6706)

  - Use after free in CSS in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) (CVE-2023-6707)

  - Type Confusion in V8. (CVE-2023-6702)

  - Use after free in Blink. (CVE-2023-6703)

  - Use after free in libavif. (CVE-2023-6704)

  - Use after free in WebRTC. (CVE-2023-6705)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Debian DSA-5577-1 : chromium - security update

high Nessus Plugin ID 186928

Version 1.3