Skia, as used in Google Chrome before 50.0.2661.94, allows remote attackers to bypass the Same Origin Policy and obtain sensitive information.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Skia, as used in Google Chrome before 50.0.2661.94, allows remote attackers to bypass the Same Origin     Policy and obtain sensitive information. (CVE-2016-5168)

Note that Nessus relies on the presence of the package as reported by the vendor.

The version of Google Chrome installed on the remote macOS host is prior to 50.0.2661.94. It is, therefore, affected by multiple vulnerabilities as referenced in the 2016_04_stable-channel-update_28 advisory.

  - Multiple unspecified vulnerabilities in Google Chrome before 50.0.2661.94 allow attackers to cause a     denial of service or possibly have other impact via unknown vectors. (CVE-2016-1666)

  - extensions/renderer/gc_callback.cc in Google Chrome before 50.0.2661.94 does not prevent fallback     execution once the Garbage Collection callback has started, which allows remote attackers to cause a     denial of service (use-after-free) or possibly have unspecified other impact via unknown vectors.
    (CVE-2016-1662)

  - Blink, as used in Google Chrome before 50.0.2661.94, mishandles assertions in the WTF::BitArray and     WTF::double_conversion::Vector classes, which allows remote attackers to cause a denial of service (out-     of-bounds write) or possibly have unspecified other impact via a crafted web site. (CVE-2016-1660)

  - Blink, as used in Google Chrome before 50.0.2661.94, does not ensure that frames satisfy a check for the     same renderer process in addition to a Same Origin Policy check, which allows remote attackers to cause a     denial of service (memory corruption) or possibly have unspecified other impact via a crafted web site,     related to BindingSecurity.cpp and DOMWindow.cpp. (CVE-2016-1661)

  - The SerializedScriptValue::transferArrayBuffers function in     WebKit/Source/bindings/core/v8/SerializedScriptValue.cpp in the V8 bindings in Blink, as used in Google     Chrome before 50.0.2661.94, mishandles certain array-buffer data structures, which allows remote attackers     to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted web     site. (CVE-2016-1663)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Google Chrome installed on the remote Windows host is prior to 50.0.2661.94. It is, therefore, affected by multiple vulnerabilities as referenced in the 2016_04_stable-channel-update_28 advisory.

  - Multiple unspecified vulnerabilities in Google Chrome before 50.0.2661.94 allow attackers to cause a     denial of service or possibly have other impact via unknown vectors. (CVE-2016-1666)

  - extensions/renderer/gc_callback.cc in Google Chrome before 50.0.2661.94 does not prevent fallback     execution once the Garbage Collection callback has started, which allows remote attackers to cause a     denial of service (use-after-free) or possibly have unspecified other impact via unknown vectors.
    (CVE-2016-1662)

  - Blink, as used in Google Chrome before 50.0.2661.94, mishandles assertions in the WTF::BitArray and     WTF::double_conversion::Vector classes, which allows remote attackers to cause a denial of service (out-     of-bounds write) or possibly have unspecified other impact via a crafted web site. (CVE-2016-1660)

  - Blink, as used in Google Chrome before 50.0.2661.94, does not ensure that frames satisfy a check for the     same renderer process in addition to a Same Origin Policy check, which allows remote attackers to cause a     denial of service (memory corruption) or possibly have unspecified other impact via a crafted web site,     related to BindingSecurity.cpp and DOMWindow.cpp. (CVE-2016-1661)

  - The SerializedScriptValue::transferArrayBuffers function in     WebKit/Source/bindings/core/v8/SerializedScriptValue.cpp in the V8 bindings in Blink, as used in Google     Chrome before 50.0.2661.94, mishandles certain array-buffer data structures, which allows remote attackers     to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted web     site. (CVE-2016-1663)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
263656	Linux Distros Unpatched Vulnerability : CVE-2016-5168	Nessus	Misc.	Local	high
90795	Google Chrome < 50.0.2661.94 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	Local	critical
90794	Google Chrome < 50.0.2661.94 Multiple Vulnerabilities	Nessus	Windows	Local	critical

Detections

Analytics

CVE-2016-5168

high

Tenable Plugins

high

critical

critical