The version of Google Chrome installed on the remote Windows host is prior to 107.0.5304.62. It is, therefore, affected by multiple vulnerabilities as referenced in the 2022_10_stable-channel-update-for-desktop_25 advisory.

  - Use after free in Accessibility in Google Chrome on Chrome OS prior to 107.0.5304.62 allowed a remote     attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption     via specific UI interactions. (Chromium security severity: Medium) (CVE-2022-3659)

  - Type confusion in V8 in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2022-3652)

  - Heap buffer overflow in Vulkan in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)     (CVE-2022-3653)

  - Use after free in Layout in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2022-3654)

  - Heap buffer overflow in Media Galleries in Google Chrome prior to 107.0.5304.62 allowed an attacker who     convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted     HTML page. (Chromium security severity: Medium) (CVE-2022-3655)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Google Chrome installed on the remote macOS host is prior to 107.0.5304.62. It is, therefore, affected by multiple vulnerabilities as referenced in the 2022_10_stable-channel-update-for-desktop_25 advisory.

  - Use after free in Accessibility in Google Chrome on Chrome OS prior to 107.0.5304.62 allowed a remote     attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption     via specific UI interactions. (Chromium security severity: Medium) (CVE-2022-3659)

  - Type confusion in V8 in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2022-3652)

  - Heap buffer overflow in Vulkan in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)     (CVE-2022-3653)

  - Use after free in Layout in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2022-3654)

  - Heap buffer overflow in Media Galleries in Google Chrome prior to 107.0.5304.62 allowed an attacker who     convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted     HTML page. (Chromium security severity: Medium) (CVE-2022-3655)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5261 advisory.

  - Type Confusion in V8. (CVE-2022-3652)

  - Heap buffer overflow in Vulkan. (CVE-2022-3653)

  - Use after free in Layout. (CVE-2022-3654)

  - Heap buffer overflow in Media Galleries. (CVE-2022-3655)

  - Insufficient data validation in File System. (CVE-2022-3656)

  - Use after free in Extensions. (CVE-2022-3657)

  - Use after free in Feedback service on Chrome OS. (CVE-2022-3658)

  - Use after free in Accessibility. (CVE-2022-3659)

  - Inappropriate implementation in Full screen mode. (CVE-2022-3660)

  - Insufficient data validation in Extensions. (CVE-2022-3661)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:10177-1 advisory.

  - Type Confusion in V8. (CVE-2022-3652, CVE-2022-3723)

  - Heap buffer overflow in Vulkan. (CVE-2022-3653)

  - Use after free in Layout. (CVE-2022-3654)

  - Heap buffer overflow in Media Galleries. (CVE-2022-3655)

  - Insufficient data validation in File System. (CVE-2022-3656)

  - Use after free in Extensions. (CVE-2022-3657)

  - Use after free in Feedback service on Chrome OS. (CVE-2022-3658)

  - Use after free in Accessibility. (CVE-2022-3659)

  - Inappropriate implementation in Full screen mode. (CVE-2022-3660)

  - Insufficient data validation in Extensions. (CVE-2022-3661)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the b4ef02f4-549f-11ed-8ad9-3065ec8fd3ec advisory.

  - Type Confusion in V8. (CVE-2022-3652)

  - Heap buffer overflow in Vulkan. (CVE-2022-3653)

  - Use after free in Layout. (CVE-2022-3654)

  - Heap buffer overflow in Media Galleries. (CVE-2022-3655)

  - Insufficient data validation in File System. (CVE-2022-3656)

  - Use after free in Extensions. (CVE-2022-3657)

  - Use after free in Feedback service on Chrome OS. (CVE-2022-3658)

  - Use after free in Accessibility. (CVE-2022-3659)

  - Inappropriate implementation in Full screen mode. (CVE-2022-3660)

  - Insufficient data validation in Extensions. (CVE-2022-3661)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:10180-1 advisory.

  - Type Confusion in V8. (CVE-2022-3652, CVE-2022-3723)

  - Heap buffer overflow in Vulkan. (CVE-2022-3653)

  - Use after free in Layout. (CVE-2022-3654)

  - Heap buffer overflow in Media Galleries. (CVE-2022-3655)

  - Insufficient data validation in File System. (CVE-2022-3656)

  - Use after free in Extensions. (CVE-2022-3657)

  - Use after free in Feedback service on Chrome OS. (CVE-2022-3658)

  - Use after free in Accessibility. (CVE-2022-3659)

  - Inappropriate implementation in Full screen mode. (CVE-2022-3660)

  - Insufficient data validation in Extensions. (CVE-2022-3661)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
166468	Google Chrome < 107.0.5304.62 Multiple Vulnerabilities	Nessus	Windows	10/25/2022	3/21/2023	high
166469	Google Chrome < 107.0.5304.62 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	10/25/2022	3/21/2023	high
166591	Debian DSA-5261-1 : chromium - security update	Nessus	Debian Local Security Checks	10/27/2022	11/28/2022	high
166766	openSUSE 15 Security Update : chromium (openSUSE-SU-2022:10177-1)	Nessus	SuSE Local Security Checks	11/1/2022	10/25/2023	high
166497	FreeBSD : chromium -- multiple vulnerabilities (b4ef02f4-549f-11ed-8ad9-3065ec8fd3ec)	Nessus	FreeBSD Local Security Checks	10/25/2022	11/28/2022	high
166762	openSUSE 15 Security Update : chromium (openSUSE-SU-2022:10180-1)	Nessus	SuSE Local Security Checks	11/1/2022	10/25/2023	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high