The version of Microsoft Edge installed on the remote Windows host is prior to 127.0.2651.98. It is, therefore, affected by multiple vulnerabilities as referenced in the August 8, 2024 advisory.

  - Out of bounds memory access in ANGLE in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)     (CVE-2024-7532)

  - Use after free in Sharing in Google Chrome on iOS prior to 127.0.6533.99 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)     (CVE-2024-7533)

  - Heap buffer overflow in Layout in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)     (CVE-2024-7534)

  - Inappropriate implementation in V8 in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)     (CVE-2024-7535)

  - Use after free in WebAudio in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)     (CVE-2024-7536)

  - Type Confusion in V8 in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2024-7550)

  - Microsoft Edge (HTML-based) Memory Corruption Vulnerability (CVE-2024-38218)

  - Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability (CVE-2024-38219)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Microsoft Edge (Chromium) < 127.0.2651.98 Multiple Vulnerabilities

critical Nessus Plugin ID 205222

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.5 Aug 30, 2024, 7:43 AM CVSS metrics ("CVSSv3 score" set to 9.0) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H") CVSSv3 score source (set to "CVE-2024-38219") Plugin Feed: 202408300743
Version 1.4 Aug 23, 2024, 11:38 AM IAVM reference Plugin Feed: 202408231138
Version 1.3 Aug 16, 2024, 4:11 PM IAVM reference STIG Severity (set to "I") Plugin Feed: 202408161611
Version 1.2 Aug 13, 2024, 9:21 AM CVSS metrics ("CVSSv2 score" set to 10.0) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C") CVSSv2 score source (changed from "CVE-2024-38218" to "CVE-2024-7550") CVSSv3 score source (changed from "CVE-2024-7550" to none) Plugin Feed: 202408130921
Version 1.1 Aug 9, 2024, 1:42 AM New Plugin Feed: 202408090142