The version of Microsoft Edge installed on the remote Windows host is prior to 125.0.2535.67. It is, therefore, affected by multiple vulnerabilities as referenced in the May 16, 2024 advisory.

  - Use after free in Scheduling in Google Chrome prior to 125.0.6422.76 allowed a remote attacker to execute     arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)     (CVE-2024-5157)

  - Type Confusion in V8 in Google Chrome prior to 125.0.6422.76 allowed a remote attacker to potentially     perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High) (CVE-2024-5158)

  - Heap buffer overflow in ANGLE in Google Chrome prior to 125.0.6422.76 allowed a remote attacker to perform     an out of bounds memory read via a crafted HTML page. (Chromium security severity: High) (CVE-2024-5159)

  - Heap buffer overflow in Dawn in Google Chrome prior to 125.0.6422.76 allowed a remote attacker to perform     an out of bounds memory write via a crafted HTML page. (Chromium security severity: High) (CVE-2024-5160)

  - Type Confusion in V8. (CVE-2024-5274) 

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Microsoft Edge (Chromium) < 125.0.2535.67 Multiple Vulnerabilities

high Nessus Plugin ID 202467

Version 1.2

Version 1.1

Version 1.2 Jul 16, 2024, 4:34 PM CISA reference Exploit attributes ("Exploit available" set to "True") Exploit attributes ("Exploitability ease" set to "Exploits are available") Plugin Feed: 202407161634
Version 1.1 Jul 16, 2024, 2:33 PM New Plugin Feed: 202407161433