The version of Microsoft Edge installed on the remote Windows host is prior to 126.0.2592.68. It is, therefore, affected by multiple vulnerabilities as referenced in the June 20, 2024 advisory.

  - Microsoft Edge (Chromium-based) Spoofing Vulnerability (CVE-2024-38082, CVE-2024-38093)

  - Type Confusion in V8 in Google Chrome prior to 126.0.6478.114 allowed a remote attacker to execute     arbitrary code via a crafted HTML page. (Chromium security severity: High) (CVE-2024-6100)

  - Inappropriate implementation in V8 in Google Chrome prior to 126.0.6478.114 allowed a remote attacker to     perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)     (CVE-2024-6101)

  - Out of bounds memory access in Dawn in Google Chrome prior to 126.0.6478.114 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)     (CVE-2024-6102)

  - Use after free in Dawn in Google Chrome prior to 126.0.6478.114 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2024-6103)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Microsoft Edge (Chromium) < 126.0.2592.68 Multiple Vulnerabilities

high Nessus Plugin ID 200793

Version 1.7

Version 1.6

Version 1.5

Version 1.3

Version 1.2

Version 1.7 Jul 12, 2024, 5:55 PM IAVM reference Plugin Feed: 202407121755
Version 1.6 Jul 2, 2024, 10:37 AM IAVM reference Plugin Feed: 202407021037
Version 1.5 Jun 28, 2024, 10:00 AM IAVM reference Plugin Feed: 202406281000
Version 1.3 Jun 24, 2024, 6:33 PM Plugin metadata Plugin Feed: 202406241833
Version 1.2 Jun 21, 2024, 2:16 PM IAVM reference New STIG Severity Plugin Feed: 202406211416