The version of Google Chrome installed on the remote Windows host is prior to 130.0.6723.58. It is, therefore, affected by multiple vulnerabilities as referenced in the 2024_10_stable-channel-update-for-desktop_15 advisory.

  - Use after free in AI. (CVE-2024-9954)

  - Use after free in Web Authentication. (CVE-2024-9955)

  - Inappropriate implementation in Web Authentication. (CVE-2024-9956)

  - Use after free in UI. (CVE-2024-9957)

  - Inappropriate implementation in PictureInPicture. (CVE-2024-9958)

  - Use after free in DevTools. (CVE-2024-9959)

  - Use after free in Dawn. (CVE-2024-9960)

  - Use after free in Parcel Tracking. (CVE-2024-9961)

  - Inappropriate implementation in Permissions. (CVE-2024-9962)

  - Insufficient data validation in Downloads. (CVE-2024-9963)

  - Inappropriate implementation in Payments. (CVE-2024-9964)

  - Insufficient data validation in DevTools. (CVE-2024-9965)

  - Inappropriate implementation in Navigations. (CVE-2024-9966)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Google Chrome < 130.0.6723.58 Multiple Vulnerabilities

high Nessus Plugin ID 209038

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.5 Oct 25, 2024, 10:52 AM IAVM reference Plugin Feed: 202410251052
Version 1.4 Oct 18, 2024, 12:11 PM IAVM reference STIG Severity (set to "I") Plugin Feed: 202410181211
Version 1.3 Oct 18, 2024, 9:34 AM CVSSv2 score source (changed from "CVE-2024-9961" to "CVE-2024-9965") Plugin Feed: 202410180934
Version 1.2 Oct 17, 2024, 7:13 AM CVSS metrics ("CVSSv3 score" set to 8.8) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H") Plugin Feed: 202410170713
Version 1.1 Oct 15, 2024, 9:29 PM New Plugin Feed: 202410152129