遠端 macOS 主機上安裝的 Google Chrome 版本早於 127.0.6533.99。因此會受到 2024_08_stable-channel-update-for-desktop 公告中所提及的多個弱點影響。

  - ANGLE 中的超出邊界記憶體存取弱點。(CVE-2024-7532)

  - Sharing 中存在釋放後使用弱點。(CVE-2024-7533)

  - Layout 中的堆積緩衝區溢位弱點。(CVE-2024-7534)

  - V8 中存在不當實作問題 (CVE-2024-7535)

  - WebAudio 中存在釋放後使用問題。(CVE-2024-7536)

  - V8 中存在類型混淆弱點。(CVE-2024-7550)

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

リモート macOS ホストにインストールされている Google Chrome のバージョンは、127.0.6533.99より前です。したがって、2024_08_stable-channel-update-for-desktop のアドバイザリに記載されている複数の脆弱性の影響を受けます。

  - ANGLE における領域外メモリアクセス。(CVE-2024-7532)

  - Sharing におけるメモリ解放後使用 (Use After Free)。(CVE-2024-7533)

  - Layout でのヒープバッファオーバーフロー。(CVE-2024-7534)

  - V8 における不適切な実装。(CVE-2024-7535)

  - WebAudio におけるメモリ解放後使用 (Use After Free)。(CVE-2024-7536)

  - V8 の型の取り違え。(CVE-2024-7550)

Nessus はこれらの問題をテストしておらず、代わりにアプリケーションが自己報告するバージョン番号にのみ依存していることに注意してください。

The version of Google Chrome installed on the remote macOS host is prior to 127.0.6533.99. It is, therefore, affected by multiple vulnerabilities as referenced in the 2024_08_stable-channel-update-for-desktop advisory.

  - Out of bounds memory access in ANGLE. (CVE-2024-7532)

  - Use after free in Sharing. (CVE-2024-7533)

  - Heap buffer overflow in Layout. (CVE-2024-7534)

  - Inappropriate implementation in V8. (CVE-2024-7535)

  - Use after free in WebAudio. (CVE-2024-7536)

  - Type Confusion in V8. (CVE-2024-7550)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5741 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-5741-1                   security@debian.org     https://www.debian.org/security/                           Andres Salomon     August 08, 2024                       https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : chromium     CVE ID         : CVE-2024-7532 CVE-2024-7533 CVE-2024-7534 CVE-2024-7535                      CVE-2024-7536 CVE-2024-7550

    Security issues were discovered in Chromium which could result     in the execution of arbitrary code, denial of service, or information     disclosure.

    For the stable distribution (bookworm), these problems have been fixed in     version 127.0.6533.99-1~deb12u1.

    We recommend that you upgrade your chromium packages.

    For the detailed security status of chromium please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/chromium

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

リモートの Windows ホストにインストールされている Google Chrome のバージョンは、127.0.6533.99 より前です。したがって、2024_08_stable-channel-update-for-desktop のアドバイザリに記載されている複数の脆弱性の影響を受けます。

  - ANGLE における領域外メモリアクセス。(CVE-2024-7532)

  - Sharing におけるメモリ解放後使用 (Use After Free)。(CVE-2024-7533)

  - Layout でのヒープバッファオーバーフロー。(CVE-2024-7534)

  - V8 における不適切な実装。(CVE-2024-7535)

  - WebAudio におけるメモリ解放後使用 (Use After Free)。(CVE-2024-7536)

  - V8 の型の取り違え。(CVE-2024-7550)

Nessus はこれらの問題をテストしておらず、代わりにアプリケーションが自己報告するバージョン番号にのみ依存していることに注意してください。

远程 Windows 主机上安装的 Google Chrome 版本低于 127.0.6533.99。因此，如公告 2024_08_stable-channel-update-for-desktop 所述，受到多个漏洞的影响。

  - ANGLE 中的越界内存访问漏洞。(CVE-2024-7532)

  - Sharing 中的释放后使用。(CVE-2024-7533)

  - Layout 中存在堆缓冲区溢出漏洞。(CVE-2024-7534)

  - V8 中存在不当实现。(CVE-2024-7535)

  - WebAudio 中存在释放后使用问题。（CVE-2024-7536）

  - V8 中的类型混淆。(CVE-2024-7550)

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

遠端 Windows 主機上安裝的 Google Chrome 版本為 127.0.6533.99 之前版本。因此會受到 2024_08_stable-channel-update-for-desktop 公告中所提及的多個弱點影響。

  - ANGLE 中的超出邊界記憶體存取弱點。(CVE-2024-7532)

  - Sharing 中存在釋放後使用弱點。(CVE-2024-7533)

  - Layout 中的堆積緩衝區溢位弱點。(CVE-2024-7534)

  - V8 中存在不當實作問題 (CVE-2024-7535)

  - WebAudio 中存在釋放後使用問題。(CVE-2024-7536)

  - V8 中存在類型混淆弱點。(CVE-2024-7550)

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

The version of Google Chrome installed on the remote Windows host is prior to 127.0.6533.99. It is, therefore, affected by multiple vulnerabilities as referenced in the 2024_08_stable-channel-update-for-desktop advisory.

  - Out of bounds memory access in ANGLE. (CVE-2024-7532)

  - Use after free in Sharing. (CVE-2024-7533)

  - Heap buffer overflow in Layout. (CVE-2024-7534)

  - Inappropriate implementation in V8. (CVE-2024-7535)

  - Use after free in WebAudio. (CVE-2024-7536)

  - Type Confusion in V8. (CVE-2024-7550)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Microsoft Edge installed on the remote Windows host is prior to 127.0.2651.98. It is, therefore, affected by multiple vulnerabilities as referenced in the August 8, 2024 advisory.

  - Out of bounds memory access in ANGLE in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)     (CVE-2024-7532)

  - Use after free in Sharing in Google Chrome on iOS prior to 127.0.6533.99 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)     (CVE-2024-7533)

  - Heap buffer overflow in Layout in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)     (CVE-2024-7534)

  - Inappropriate implementation in V8 in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)     (CVE-2024-7535)

  - Use after free in WebAudio in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)     (CVE-2024-7536)

  - Type Confusion in V8 in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2024-7550)

  - Microsoft Edge (HTML-based) Memory Corruption Vulnerability (CVE-2024-38218)

  - Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability (CVE-2024-38219)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

远程 macOS 主机上安装的 Google Chrome 版本低于 127.0.6533.99。因此，如公告 2024_08_stable-channel-update-for-desktop 所述，受到多个漏洞的影响。

  - ANGLE 中的越界内存访问漏洞。(CVE-2024-7532)

  - Sharing 中的释放后使用。(CVE-2024-7533)

  - Layout 中存在堆缓冲区溢出漏洞。(CVE-2024-7534)

  - V8 中存在不当实现。(CVE-2024-7535)

  - WebAudio 中存在释放后使用问题。（CVE-2024-7536）

  - V8 中的类型混淆。(CVE-2024-7550)

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

ID	Name	Product	Family	Published	Updated	Severity
205017	Google Chrome < 127.0.6533.99 多個弱點	Nessus	MacOS X Local Security Checks	8/6/2024	8/8/2024	high
205017	127.0.6533.99 より前の Google Chrome の複数の脆弱性	Nessus	MacOS X Local Security Checks	8/6/2024	8/8/2024	high
205017	Google Chrome < 127.0.6533.99 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	8/6/2024	8/8/2024	high
205190	Debian dsa-5741 : chromium - security update	Nessus	Debian Local Security Checks	8/8/2024	8/8/2024	high
205016	127.0.6533.99 より前の Google Chrome の複数の脆弱性	Nessus	Windows	8/6/2024	8/8/2024	high
205016	Google Chrome < 127.0.6533.99 多个漏洞	Nessus	Windows	8/6/2024	8/8/2024	high
205016	Google Chrome < 127.0.6533.99 多個弱點	Nessus	Windows	8/6/2024	8/8/2024	high
205016	Google Chrome < 127.0.6533.99 Multiple Vulnerabilities	Nessus	Windows	8/6/2024	8/8/2024	high
205222	Microsoft Edge (Chromium) < 127.0.2651.98 Multiple Vulnerabilities	Nessus	Windows	8/8/2024	8/8/2024	high
205017	Google Chrome < 127.0.6533.99 多个漏洞	Nessus	MacOS X Local Security Checks	8/6/2024	8/8/2024	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high

high

high

high