Insufficient policy validation in navigation in Google Chrome on iOS prior to 77.0.3865.75 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.

The remote host is affected by the vulnerability described in GLSA-201911-06 (Chromium, Google Chrome: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Chromium and Google       Chrome. Please review the CVE identifiers referenced below for details.
  Impact :

    Please review the referenced CVE identifiers for details.
  Workaround :

    There is no known workaround at this time.

Chromium update to 77.0.3865.120. For the upstream announcement see https://chromereleases.googleblog.com/2019/10/stable-channel-update-fo r-desktop.html.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of Google Chrome installed on the remote Windows host is prior to 77.0.3865.75. It is, therefore, affected by multiple vulnerabilities as referenced in the 2019_09_stable-channel-update-for-desktop advisory.

  - Use after free in V8 in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (CVE-2019-5878)

  - Use after free in media in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially     perform a sandbox escape via a crafted HTML page. (CVE-2019-5870)

  - Use-after-free in accessibility in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2019-13766)

  - Heap buffer overflow in Skia in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2019-5871)

  - Use after free in Mojo in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (CVE-2019-5872)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Google Chrome installed on the remote macOS host is prior to 77.0.3865.75. It is, therefore, affected by multiple vulnerabilities as referenced in the 2019_09_stable-channel-update-for-desktop advisory.

  - Use after free in V8 in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (CVE-2019-5878)

  - Use after free in media in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially     perform a sandbox escape via a crafted HTML page. (CVE-2019-5870)

  - Use-after-free in accessibility in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2019-13766)

  - Heap buffer overflow in Skia in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2019-5871)

  - Use after free in Mojo in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (CVE-2019-5872)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
131266	GLSA-201911-06 : Chromium, Google Chrome: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	Local	critical
130309	Fedora 31 : chromium (2019-9a5e81214f)	Nessus	Fedora Local Security Checks	Local	critical
128741	Google Chrome < 77.0.3865.75 Multiple Vulnerabilities	Nessus	Windows	Local	critical
128740	Google Chrome < 77.0.3865.75 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	Local	critical

Detections

Analytics

CVE-2019-5873

medium

Tenable Plugins

critical

critical

critical

critical