The version of Microsoft Edge installed on the remote Windows host is prior to 101.0.1210.47. It is, therefore, affected by multiple vulnerabilities as referenced in the May 13, 2022 advisory.

  - Use after free in Sharing in Google Chrome prior to 101.0.4951.64 allowed a remote attacker who convinced     a user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML     page. (CVE-2022-1640)

  - Use after free in Browser UI in Google Chrome prior to 101.0.4951.64 allowed a remote attacker who had     convinced a user to engage in specific UI interaction to potentially exploit heap corruption via specific     user interactions. (CVE-2022-1634)

  - Use after free in Permission Prompts in Google Chrome prior to 101.0.4951.64 allowed a remote attacker who     convinced a user to engage in specific UI interactions to potentially exploit heap corruption via specific     user interactions. (CVE-2022-1635)

  - Use after free in Performance APIs in Google Chrome prior to 101.0.4951.64 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2022-1636)

  - Inappropriate implementation in Web Contents in Google Chrome prior to 101.0.4951.64 allowed a remote     attacker to leak cross-origin data via a crafted HTML page. (CVE-2022-1637)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the ac91cf5e-d098-11ec-bead-3065ec8fd3ec advisory.

  - Use after free in Web UI Diagnostics in Google Chrome on Chrome OS prior to 101.0.4951.64 allowed a remote     attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption     via specific user interaction. (CVE-2022-1641)

  - Use after free in Sharesheet in Google Chrome on Chrome OS prior to 101.0.4951.64 allowed a remote     attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption     via specific user interactions. (CVE-2022-1633)

  - Use after free in Browser UI in Google Chrome prior to 101.0.4951.64 allowed a remote attacker who had     convinced a user to engage in specific UI interaction to potentially exploit heap corruption via specific     user interactions. (CVE-2022-1634)

  - Use after free in Permission Prompts in Google Chrome prior to 101.0.4951.64 allowed a remote attacker who     convinced a user to engage in specific UI interactions to potentially exploit heap corruption via specific     user interactions. (CVE-2022-1635)

  - Use after free in Performance APIs in Google Chrome prior to 101.0.4951.64 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2022-1636)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:0133-1 advisory.

  - Use after free in Sharesheet. (CVE-2022-1633)

  - Use after free in Browser UI. (CVE-2022-1634)

  - Use after free in Permission Prompts. (CVE-2022-1635)

  - Use after free in Performance APIs. (CVE-2022-1636)

  - Inappropriate implementation in Web Contents. (CVE-2022-1637)

  - Heap buffer overflow in V8 Internationalization. (CVE-2022-1638)

  - Use after free in ANGLE. (CVE-2022-1639)

  - Use after free in Sharing. (CVE-2022-1640)

  - Use after free in Web UI Diagnostics. (CVE-2022-1641)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Google Chrome installed on the remote macOS host is prior to 101.0.4951.64. It is, therefore, affected by multiple vulnerabilities as referenced in the 2022_05_stable-channel-update-for-desktop_10 advisory.

  - Use after free in Web UI Diagnostics in Google Chrome on Chrome OS prior to 101.0.4951.64 allowed a remote     attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption     via specific user interaction. (CVE-2022-1641)

  - Use after free in Sharesheet in Google Chrome on Chrome OS prior to 101.0.4951.64 allowed a remote     attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption     via specific user interactions. (CVE-2022-1633)

  - Use after free in Browser UI in Google Chrome prior to 101.0.4951.64 allowed a remote attacker who had     convinced a user to engage in specific UI interaction to potentially exploit heap corruption via specific     user interactions. (CVE-2022-1634)

  - Use after free in Permission Prompts in Google Chrome prior to 101.0.4951.64 allowed a remote attacker who     convinced a user to engage in specific UI interactions to potentially exploit heap corruption via specific     user interactions. (CVE-2022-1635)

  - Use after free in Performance APIs in Google Chrome prior to 101.0.4951.64 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2022-1636)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Google Chrome installed on the remote Windows host is prior to 101.0.4951.64. It is, therefore, affected by multiple vulnerabilities as referenced in the 2022_05_stable-channel-update-for-desktop_10 advisory.

  - Use after free in Web UI Diagnostics in Google Chrome on Chrome OS prior to 101.0.4951.64 allowed a remote     attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption     via specific user interaction. (CVE-2022-1641)

  - Use after free in Sharesheet in Google Chrome on Chrome OS prior to 101.0.4951.64 allowed a remote     attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption     via specific user interactions. (CVE-2022-1633)

  - Use after free in Browser UI in Google Chrome prior to 101.0.4951.64 allowed a remote attacker who had     convinced a user to engage in specific UI interaction to potentially exploit heap corruption via specific     user interactions. (CVE-2022-1634)

  - Use after free in Permission Prompts in Google Chrome prior to 101.0.4951.64 allowed a remote attacker who     convinced a user to engage in specific UI interactions to potentially exploit heap corruption via specific     user interactions. (CVE-2022-1635)

  - Use after free in Performance APIs in Google Chrome prior to 101.0.4951.64 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2022-1636)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5134 advisory.

  - Use after free in Web UI Diagnostics in Google Chrome on Chrome OS prior to 101.0.4951.64 allowed a remote     attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption     via specific user interaction. (CVE-2022-1641)

  - Use after free in Sharesheet in Google Chrome on Chrome OS prior to 101.0.4951.64 allowed a remote     attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption     via specific user interactions. (CVE-2022-1633)

  - Use after free in Browser UI in Google Chrome prior to 101.0.4951.64 allowed a remote attacker who had     convinced a user to engage in specific UI interaction to potentially exploit heap corruption via specific     user interactions. (CVE-2022-1634)

  - Use after free in Permission Prompts in Google Chrome prior to 101.0.4951.64 allowed a remote attacker who     convinced a user to engage in specific UI interactions to potentially exploit heap corruption via specific     user interactions. (CVE-2022-1635)

  - Use after free in Performance APIs in Google Chrome prior to 101.0.4951.64 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2022-1636)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
161198	Microsoft Edge (Chromium) < 101.0.1210.47 Multiple Vulnerabilities	Nessus	Windows	5/14/2022	3/23/2023	high
160970	FreeBSD : chromium -- multiple vulnerabilities (ac91cf5e-d098-11ec-bead-3065ec8fd3ec)	Nessus	FreeBSD Local Security Checks	5/11/2022	10/27/2023	high
161246	openSUSE 15 Security Update : chromium (openSUSE-SU-2022:0133-1)	Nessus	SuSE Local Security Checks	5/17/2022	10/27/2023	high
160905	Google Chrome < 101.0.4951.64 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	5/10/2022	10/27/2023	high
160906	Google Chrome < 101.0.4951.64 Multiple Vulnerabilities	Nessus	Windows	5/10/2022	10/27/2023	high
161150	Debian DSA-5134-1 : chromium - security update	Nessus	Debian Local Security Checks	5/13/2022	10/27/2023	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high