Inappropriate implementation in Navigation in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Inappropriate implementation in Navigation in Google Chrome prior to 97.0.4692.71 allowed a remote     attacker to leak cross-origin data via a crafted HTML page. (CVE-2022-0108)

Note that Nessus relies on the presence of the package as reported by the vendor.

According to its banner, the version of Apple TV on the remote device is prior to 16.3. It is therefore affected by multiple vulnerabilities as described in the HT213601

The version of Safari installed on the remote host is prior to 16.3. It is, therefore, affected by multiple vulnerabilities as referenced in the HT213638 advisory. Note that Nessus Network Monitor has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3419 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-3419-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/               Emilio Pozuelo Monfort     May 12, 2023                                  https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : webkit2gtk     Version        : 2.38.6-0+deb10u1     CVE ID         : CVE-2022-0108 CVE-2022-32885 CVE-2023-27932 CVE-2023-27954                      CVE-2023-28205

    The following vulnerabilities have been discovered in the WebKitGTK     web engine:

    CVE-2022-0108

        Luan Herrera discovered that an HTML document may be able to         render iframes with sensitive user information.

    CVE-2022-32885

        P1umer and Q1IQ discovered that processing maliciously crafted web         content may lead to arbitrary code execution.

    CVE-2023-27932

        An anonymous researcher discovered that processing maliciously         crafted web content may bypass Same Origin Policy.

    CVE-2023-27954

        An anonymous researcher discovered that a website may be able to         track sensitive user information.

    CVE-2023-28205

        Clement Lecigne and Donncha O Cearbhaill discovered that         processing maliciously crafted web content may lead to arbitrary         code execution. Apple is aware of a report that this issue may         have been actively exploited.

    For Debian 10 buster, these problems have been fixed in version     2.38.6-0+deb10u1.

    We recommend that you upgrade your webkit2gtk packages.

    For the detailed security status of webkit2gtk please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/webkit2gtk

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS / 22.04 LTS / 23.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6061-1 advisory.

    Several security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were     tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to     web browser security, including cross-site scripting attacks, denial of service attacks, and arbitrary     code execution.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-8900b35c6f advisory.

     * The Bubblewrap sandbox no longer requires setting an application identifier via GApplication to operate     correctly. Using GApplication is still recommended, but optional.
     * Adjust the scrolling speed for mouse wheels to make it feel more natural.
     * Allow pasting content using the Asynchronous Clipboard API when the origin is the same as the clipboard     contents.
     * Improvements to the GStreamer multimedia playback, in particular around MSE, WebRTC, and seeking.
     * Make all supported image types appear in the Accept HTTP header.
     * Fix text caret blinking when blinking is disabled in the GTK settings.
     * Fix default database quota size definition.
     * Fix application of all caps tags listed in the font-feature-settings CSS property.
     * Fix font height calculations for the font-size-adjust CSS property.
     * Fix several crashes and rendering issues.
     * Security fixes: CVE-2022-0108, CVE-2022-32885, CVE-2023-25358, CVE-2023-27932, CVE-2023-27954,     CVE-2023-28205

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5397 advisory.

  - Inappropriate implementation in Navigation in Google Chrome prior to 97.0.4692.71 allowed a remote     attacker to leak cross-origin data via a crafted HTML page. (CVE-2022-0108)

  - A use after free issue was addressed with improved memory management. This issue is fixed in iOS 15.7.5     and iPadOS 15.7.5, Safari 16.4.1, iOS 16.4.1 and iPadOS 16.4.1, macOS Ventura 13.3.1. Processing     maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this     issue may have been actively exploited. (CVE-2023-28205)

  -  * The Bubblewrap sandbox no longer requires setting an application identifier via GApplication to operate     correctly. Using GApplication is still recommended, but optional.  * Adjust the scrolling speed for mouse     wheels to make it feel more natural.  * Allow pasting content using the Asynchronous Clipboard API when     the origin is the same as the clipboard contents.  * Improvements to the GStreamer multimedia playback, in     particular around MSE, WebRTC, and seeking.  * Make all supported image types appear in the Accept HTTP     header.  * Fix text caret blinking when blinking is disabled in the GTK settings.  * Fix default database     quota size definition.  * Fix application of all caps tags listed in the font-feature-settings CSS     property.  * Fix font height calculations for the font-size-adjust CSS property.  * Fix several crashes     and rendering issues.  * Security fixes: CVE-2022-0108, CVE-2022-32885, CVE-2023-25358, CVE-2023-27932,     CVE-2023-27954, CVE-2023-28205  (CVE-2022-32885)

  - This issue was addressed with improved state management. (CVE-2023-27932)

  - The issue was addressed by removing origin information. (CVE-2023-27954)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5396 advisory.

  - Inappropriate implementation in Navigation in Google Chrome prior to 97.0.4692.71 allowed a remote     attacker to leak cross-origin data via a crafted HTML page. (CVE-2022-0108)

  - A use after free issue was addressed with improved memory management. This issue is fixed in iOS 15.7.5     and iPadOS 15.7.5, Safari 16.4.1, iOS 16.4.1 and iPadOS 16.4.1, macOS Ventura 13.3.1. Processing     maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this     issue may have been actively exploited. (CVE-2023-28205)

  -  * The Bubblewrap sandbox no longer requires setting an application identifier via GApplication to operate     correctly. Using GApplication is still recommended, but optional.  * Adjust the scrolling speed for mouse     wheels to make it feel more natural.  * Allow pasting content using the Asynchronous Clipboard API when     the origin is the same as the clipboard contents.  * Improvements to the GStreamer multimedia playback, in     particular around MSE, WebRTC, and seeking.  * Make all supported image types appear in the Accept HTTP     header.  * Fix text caret blinking when blinking is disabled in the GTK settings.  * Fix default database     quota size definition.  * Fix application of all caps tags listed in the font-feature-settings CSS     property.  * Fix font height calculations for the font-size-adjust CSS property.  * Fix several crashes     and rendering issues.  * Security fixes: CVE-2022-0108, CVE-2022-32885, CVE-2023-25358, CVE-2023-27932,     CVE-2023-27954, CVE-2023-28205  (CVE-2022-32885)

  - This issue was addressed with improved state management. (CVE-2023-27932)

  - The issue was addressed by removing origin information. (CVE-2023-27954)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2078-1 advisory.

  - Inappropriate implementation in Navigation in Google Chrome prior to 97.0.4692.71 allowed a remote     attacker to leak cross-origin data via a crafted HTML page. (CVE-2022-0108)

  - A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 15.6 and     iPadOS 15.6, macOS Monterey 12.5, Safari 15.6. Processing maliciously crafted web content may lead to     arbitrary code execution (CVE-2022-32885)

  - A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Safari 16, iOS     16, iOS 15.7 and iPadOS 15.7. Processing maliciously crafted web content may lead to arbitrary code     execution. (CVE-2022-32886)

  - An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 16, iOS     16, iOS 15.7 and iPadOS 15.7. Processing maliciously crafted web content may lead to arbitrary code     execution. (CVE-2022-32912)

  - A use-after-free vulnerability in WebCore::RenderLayer::addChild in WebKitGTK before 2.36.8 allows     attackers to execute code remotely. (CVE-2023-25358)

  - A use-after-free vulnerability in WebCore::RenderLayer::renderer in WebKitGTK before 2.36.8 allows     attackers to execute code remotely. (CVE-2023-25360)

  - A use-after-free vulnerability in WebCore::RenderLayer::setNextSibling in WebKitGTK before 2.36.8 allows     attackers to execute code remotely. (CVE-2023-25361)

  - A use-after-free vulnerability in WebCore::RenderLayer::repaintBlockSelectionGaps in WebKitGTK before     2.36.8 allows attackers to execute code remotely. (CVE-2023-25362)

  - A use-after-free vulnerability in WebCore::RenderLayer::updateDescendantDependentFlags in WebKitGTK before     2.36.8 allows attackers to execute code remotely. (CVE-2023-25363)

  - This issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, tvOS     16.4, watchOS 9.4, Safari 16.4, iOS 16.4 and iPadOS 16.4. Processing maliciously crafted web content may     bypass Same Origin Policy (CVE-2023-27932)

  - The issue was addressed by removing origin information. This issue is fixed in macOS Ventura 13.3, iOS     15.7.4 and iPadOS 15.7.4, tvOS 16.4, watchOS 9.4, Safari 16.4, iOS 16.4 and iPadOS 16.4. A website may be     able to track sensitive user information (CVE-2023-27954)

  - A use after free issue was addressed with improved memory management. This issue is fixed in macOS Ventura     13.3.1, iOS 16.4.1 and iPadOS 16.4.1, iOS 15.7.5 and iPadOS 15.7.5, Safari 16.4.1. Processing maliciously     crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may     have been actively exploited. (CVE-2023-28205)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2077-1 advisory.

  - Inappropriate implementation in Navigation in Google Chrome prior to 97.0.4692.71 allowed a remote     attacker to leak cross-origin data via a crafted HTML page. (CVE-2022-0108)

  - A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 15.6 and     iPadOS 15.6, macOS Monterey 12.5, Safari 15.6. Processing maliciously crafted web content may lead to     arbitrary code execution (CVE-2022-32885)

  - A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Safari 16, iOS     16, iOS 15.7 and iPadOS 15.7. Processing maliciously crafted web content may lead to arbitrary code     execution. (CVE-2022-32886)

  - An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 16, iOS     16, iOS 15.7 and iPadOS 15.7. Processing maliciously crafted web content may lead to arbitrary code     execution. (CVE-2022-32912)

  - A use-after-free vulnerability in WebCore::RenderLayer::addChild in WebKitGTK before 2.36.8 allows     attackers to execute code remotely. (CVE-2023-25358)

  - A use-after-free vulnerability in WebCore::RenderLayer::renderer in WebKitGTK before 2.36.8 allows     attackers to execute code remotely. (CVE-2023-25360)

  - A use-after-free vulnerability in WebCore::RenderLayer::setNextSibling in WebKitGTK before 2.36.8 allows     attackers to execute code remotely. (CVE-2023-25361)

  - A use-after-free vulnerability in WebCore::RenderLayer::repaintBlockSelectionGaps in WebKitGTK before     2.36.8 allows attackers to execute code remotely. (CVE-2023-25362)

  - A use-after-free vulnerability in WebCore::RenderLayer::updateDescendantDependentFlags in WebKitGTK before     2.36.8 allows attackers to execute code remotely. (CVE-2023-25363)

  - This issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, tvOS     16.4, watchOS 9.4, Safari 16.4, iOS 16.4 and iPadOS 16.4. Processing maliciously crafted web content may     bypass Same Origin Policy (CVE-2023-27932)

  - The issue was addressed by removing origin information. This issue is fixed in macOS Ventura 13.3, iOS     15.7.4 and iPadOS 15.7.4, tvOS 16.4, watchOS 9.4, Safari 16.4, iOS 16.4 and iPadOS 16.4. A website may be     able to track sensitive user information (CVE-2023-27954)

  - A use after free issue was addressed with improved memory management. This issue is fixed in macOS Ventura     13.3.1, iOS 16.4.1 and iPadOS 16.4.1, iOS 15.7.5 and iPadOS 15.7.5, Safari 16.4.1. Processing maliciously     crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may     have been actively exploited. (CVE-2023-28205)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-a4bbf02a57 advisory.

     * The Bubblewrap sandbox no longer requires setting an application identifier via GApplication to operate     correctly. Using GApplication is still recommended, but optional.
     * Adjust the scrolling speed for mouse wheels to make it feel more natural.
     * Allow pasting content using the Asynchronous Clipboard API when the origin is the same as the clipboard     contents.
     * Improvements to the GStreamer multimedia playback, in particular around MSE, WebRTC, and seeking.
     * Make all supported image types appear in the Accept HTTP header.
     * Fix text caret blinking when blinking is disabled in the GTK settings.
     * Fix default database quota size definition.
     * Fix application of all caps tags listed in the font-feature-settings CSS property.
     * Fix font height calculations for the font-size-adjust CSS property.
     * Fix several crashes and rendering issues.
     * Security fixes: CVE-2022-0108, CVE-2022-32885, CVE-2023-25358, CVE-2023-27932, CVE-2023-27954,     CVE-2023-28205


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2065-1 advisory.

  - Inappropriate implementation in Navigation in Google Chrome prior to 97.0.4692.71 allowed a remote     attacker to leak cross-origin data via a crafted HTML page. (CVE-2022-0108)

  - A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 15.6 and     iPadOS 15.6, macOS Monterey 12.5, Safari 15.6. Processing maliciously crafted web content may lead to     arbitrary code execution (CVE-2022-32885)

  - A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Safari 16, iOS     16, iOS 15.7 and iPadOS 15.7. Processing maliciously crafted web content may lead to arbitrary code     execution. (CVE-2022-32886)

  - An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 16, iOS     16, iOS 15.7 and iPadOS 15.7. Processing maliciously crafted web content may lead to arbitrary code     execution. (CVE-2022-32912)

  - A use-after-free vulnerability in WebCore::RenderLayer::addChild in WebKitGTK before 2.36.8 allows     attackers to execute code remotely. (CVE-2023-25358)

  - A use-after-free vulnerability in WebCore::RenderLayer::renderer in WebKitGTK before 2.36.8 allows     attackers to execute code remotely. (CVE-2023-25360)

  - A use-after-free vulnerability in WebCore::RenderLayer::setNextSibling in WebKitGTK before 2.36.8 allows     attackers to execute code remotely. (CVE-2023-25361)

  - A use-after-free vulnerability in WebCore::RenderLayer::repaintBlockSelectionGaps in WebKitGTK before     2.36.8 allows attackers to execute code remotely. (CVE-2023-25362)

  - A use-after-free vulnerability in WebCore::RenderLayer::updateDescendantDependentFlags in WebKitGTK before     2.36.8 allows attackers to execute code remotely. (CVE-2023-25363)

  - This issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, tvOS     16.4, watchOS 9.4, Safari 16.4, iOS 16.4 and iPadOS 16.4. Processing maliciously crafted web content may     bypass Same Origin Policy (CVE-2023-27932)

  - The issue was addressed by removing origin information. This issue is fixed in macOS Ventura 13.3, iOS     15.7.4 and iPadOS 15.7.4, tvOS 16.4, watchOS 9.4, Safari 16.4, iOS 16.4 and iPadOS 16.4. A website may be     able to track sensitive user information (CVE-2023-27954)

  - A use after free issue was addressed with improved memory management. This issue is fixed in macOS Ventura     13.3.1, iOS 16.4.1 and iPadOS 16.4.1, iOS 15.7.5 and iPadOS 15.7.5, Safari 16.4.1. Processing maliciously     crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may     have been actively exploited. (CVE-2023-28205)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2056-1 advisory.

  - Inappropriate implementation in Navigation in Google Chrome prior to 97.0.4692.71 allowed a remote     attacker to leak cross-origin data via a crafted HTML page. (CVE-2022-0108)

  - A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 15.6 and     iPadOS 15.6, macOS Monterey 12.5, Safari 15.6. Processing maliciously crafted web content may lead to     arbitrary code execution (CVE-2022-32885)

  - A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Safari 16, iOS     16, iOS 15.7 and iPadOS 15.7. Processing maliciously crafted web content may lead to arbitrary code     execution. (CVE-2022-32886)

  - An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 16, iOS     16, iOS 15.7 and iPadOS 15.7. Processing maliciously crafted web content may lead to arbitrary code     execution. (CVE-2022-32912)

  - A use-after-free vulnerability in WebCore::RenderLayer::addChild in WebKitGTK before 2.36.8 allows     attackers to execute code remotely. (CVE-2023-25358)

  - A use-after-free vulnerability in WebCore::RenderLayer::renderer in WebKitGTK before 2.36.8 allows     attackers to execute code remotely. (CVE-2023-25360)

  - A use-after-free vulnerability in WebCore::RenderLayer::setNextSibling in WebKitGTK before 2.36.8 allows     attackers to execute code remotely. (CVE-2023-25361)

  - A use-after-free vulnerability in WebCore::RenderLayer::repaintBlockSelectionGaps in WebKitGTK before     2.36.8 allows attackers to execute code remotely. (CVE-2023-25362)

  - A use-after-free vulnerability in WebCore::RenderLayer::updateDescendantDependentFlags in WebKitGTK before     2.36.8 allows attackers to execute code remotely. (CVE-2023-25363)

  - This issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, tvOS     16.4, watchOS 9.4, Safari 16.4, iOS 16.4 and iPadOS 16.4. Processing maliciously crafted web content may     bypass Same Origin Policy (CVE-2023-27932)

  - The issue was addressed by removing origin information. This issue is fixed in macOS Ventura 13.3, iOS     15.7.4 and iPadOS 15.7.4, tvOS 16.4, watchOS 9.4, Safari 16.4, iOS 16.4 and iPadOS 16.4. A website may be     able to track sensitive user information (CVE-2023-27954)

  - A use after free issue was addressed with improved memory management. This issue is fixed in macOS Ventura     13.3.1, iOS 16.4.1 and iPadOS 16.4.1, iOS 15.7.5 and iPadOS 15.7.5, Safari 16.4.1. Processing maliciously     crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may     have been actively exploited. (CVE-2023-28205)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-5b61346bbe advisory.

     * The Bubblewrap sandbox no longer requires setting an application identifier via GApplication to operate     correctly. Using GApplication is still recommended, but optional.
     * Adjust the scrolling speed for mouse wheels to make it feel more natural.
     * Allow pasting content using the Asynchronous Clipboard API when the origin is the same as the clipboard     contents.
     * Improvements to the GStreamer multimedia playback, in particular around MSE, WebRTC, and seeking.
     * Make all supported image types appear in the Accept HTTP header.
     * Fix text caret blinking when blinking is disabled in the GTK settings.
     * Fix default database quota size definition.
     * Fix application of all caps tags listed in the font-feature-settings CSS property.
     * Fix font height calculations for the font-size-adjust CSS property.
     * Fix several crashes and rendering issues.
     * Security fixes: CVE-2022-0108, CVE-2022-32885, CVE-2023-25358, CVE-2023-27932, CVE-2023-27954,     CVE-2023-28205


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Apple iOS running on the mobile device is prior to 16.3. It is, therefore, affected by multiple vulnerabilities.

The remote host is running a version of macOS / Mac OS X that is 13.x prior to 13.2. It is, therefore, affected by multiple vulnerabilities:

  - This issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in tvOS     16.3, macOS Ventura 13.2, watchOS 9.3, iOS 16.3 and iPadOS 16.3. An app may be able to bypass Privacy     preferences. (CVE-2023-32438)

  - This issue was addressed by enabling hardened runtime. This issue is fixed in macOS Monterey 12.6.3, macOS     Ventura 13.2, watchOS 9.3, macOS Big Sur 11.7.3, tvOS 16.3, iOS 16.3 and iPadOS 16.3. An app may be able     to access user-sensitive data. (CVE-2023-23499)

  - A race condition was addressed with additional validation. This issue is fixed in watchOS 9.3, tvOS 16.3,     macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3. A user may be able to read arbitrary files as root.
    (CVE-2023-23520)

  - When doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to     ask for data to send, even when the `CURLOPT_POSTFIELDS` option has been set, if the same handle     previously was used to issue a `PUT` request which used that callback. This flaw may surprise the     application and cause it to misbehave and either send off the wrong data or use memory after free or     similar in the subsequent `POST` request. The problem exists in the logic for a reused handle when it is     changed from a PUT to a POST. (CVE-2022-32221)

  - curl can be told to parse a `.netrc` file for credentials. If that file endsin a line with 4095     consecutive non-white space letters and no newline, curlwould first read past the end of the stack-based     buffer, and if the readworks, write a zero byte beyond its boundary.This will in most cases cause a     segfault or similar, but circumstances might also cause different outcomes.If a malicious user can provide     a custom netrc file to an application or otherwise affect its contents, this flaw could be used as denial-     of-service. (CVE-2022-35260)

  - curl before 7.86.0 has a double free. If curl is told to use an HTTP proxy for a transfer with a non-     HTTP(S) URL, it sets up the connection to the remote server by issuing a CONNECT request to the proxy, and     then tunnels the rest of the protocol through. An HTTP proxy might refuse this request (HTTP proxies often     only allow outgoing connections to specific port numbers, like 443 for HTTPS) and instead return a non-200     status code to the client. Due to flaws in the error/cleanup handling, this could trigger a double free in     curl if one of the following schemes were used in the URL for the transfer: dict, gopher, gophers, ldap,     ldaps, rtmp, rtmps, or telnet. The earliest affected version is 7.77.0. (CVE-2022-42915)

  - In curl before 7.86.0, the HSTS check could be bypassed to trick it into staying with HTTP. Using its HSTS     support, curl can be instructed to use HTTPS directly (instead of using an insecure cleartext HTTP step)     even when HTTP is provided in the URL. This mechanism could be bypassed if the host name in the given URL     uses IDN characters that get replaced with ASCII counterparts as part of the IDN conversion, e.g., using     the character UTF-8 U+3002 (IDEOGRAPHIC FULL STOP) instead of the common ASCII full stop of U+002E (.).
    The earliest affected version is 7.77.0 2021-05-26. (CVE-2022-42916)

  - A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur     11.7.3, macOS Ventura 13.2, macOS Monterey 12.6.3. Mounting a maliciously crafted Samba network share may     lead to arbitrary code execution. (CVE-2023-23513)

  - A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura     13.2. Mounting a maliciously crafted Samba network share may lead to arbitrary code execution.
    (CVE-2023-23539)

  - A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.2,     macOS Monterey 12.6.3. An encrypted volume may be unmounted and remounted by a different user without     prompting for the password. (CVE-2023-23493)

  - The issue was addressed with improved handling of caches. This issue is fixed in tvOS 16.3, iOS 16.3 and     iPadOS 16.3, macOS Monterey 12.6.8, macOS Big Sur 11.7.9, iOS 15.7.8 and iPadOS 15.7.8, macOS Ventura     13.2, watchOS 9.3. Processing a font file may lead to arbitrary code execution. Apple is aware of a report     that this issue may have been actively exploited against versions of iOS released before iOS 15.7.1.
    (CVE-2023-41990)

  - The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.2, iOS 16.3     and iPadOS 16.3. An app may be able to execute arbitrary code out of its sandbox or with certain elevated     privileges. (CVE-2023-23530, CVE-2023-23531)

  - A memory corruption issue was addressed with improved state management. This issue is fixed in watchOS     9.3, tvOS 16.3, macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3. Processing an image may lead to a denial-of-     service. (CVE-2023-23519)

  - The issue was addressed with improved bounds checks. This issue is fixed in macOS Monterey 12.6.3, macOS     Ventura 13.2. An app may be able to execute arbitrary code with kernel privileges. (CVE-2023-23507)

  - The issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.7.3, macOS     Ventura 13.2, macOS Monterey 12.6.3. An app may be able to execute arbitrary code with kernel privileges.
    (CVE-2023-23516)

  - The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.2, iOS 16.3     and iPadOS 16.3, iOS 15.7.3 and iPadOS 15.7.3, tvOS 16.3, watchOS 9.3. An app may be able to leak     sensitive kernel state. (CVE-2023-23500)

  - An information disclosure issue was addressed by removing the vulnerable code. This issue is fixed in     macOS Monterey 12.6.3, macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3, tvOS 16.3, watchOS 9.3. An app may be     able to determine kernel memory layout. (CVE-2023-23502)

  - The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.3, macOS     Ventura 13.2, watchOS 9.3, iOS 15.7.3 and iPadOS 15.7.3, tvOS 16.3, iOS 16.3 and iPadOS 16.3. An app may     be able to execute arbitrary code with kernel privileges. (CVE-2023-23504)

  - A permissions issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.2. An     app may be able to access user-sensitive data. (CVE-2023-23506)

  - A logic issue was addressed with improved state management. This issue is fixed in iOS 15.7.3 and iPadOS     15.7.3, macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3. The quoted original message may be selected from the     wrong email when forwarding an email from an Exchange account. (CVE-2023-23498)

  - A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.2, iOS     16.3 and iPadOS 16.3, iOS 15.7.3 and iPadOS 15.7.3, tvOS 16.3, watchOS 9.3. An app may be able to bypass     Privacy preferences. (CVE-2023-23503)

  - A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.2, iOS     16.3 and iPadOS 16.3. A user may send a text from a secondary eSIM despite configuring a contact to use a     primary eSIM. (CVE-2023-28208)

  - A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.7.3,     macOS Ventura 13.2, macOS Monterey 12.6.3. An app may be able to gain root privileges. (CVE-2023-23497)

  - A permissions issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.2. An     app may be able to access a user's Safari history. (CVE-2023-23510)

  - The issue was addressed with improved handling of caches. This issue is fixed in watchOS 9.3, tvOS 16.3,     macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3. Visiting a website may lead to an app denial-of-service.
    (CVE-2023-23512)

  - A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in     macOS Monterey 12.6.3, macOS Ventura 13.2, watchOS 9.3, macOS Big Sur 11.7.3, iOS 15.7.3 and iPadOS     15.7.3, iOS 16.3 and iPadOS 16.3. An app may be able to access information about a user's contacts.
    (CVE-2023-23505)

  - A vulnerability was found in vim and classified as problematic. Affected by this issue is the function     qf_update_buffer of the file quickfix.c of the component autocmd Handler. The manipulation leads to use     after free. The attack may be launched remotely. Upgrading to version 9.0.0805 is able to address this     issue. The name of the patch is d0fab10ed2a86698937e3c3fed2f10bd9bb5e731. It is recommended to upgrade the     affected component. The identifier of this vulnerability is VDB-212324. (CVE-2022-3705)

  - The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.3, macOS     Ventura 13.2, iOS 16.3 and iPadOS 16.3, tvOS 16.3, watchOS 9.3. An app may be able to bypass Privacy     preferences. (CVE-2023-23511)

  - The issue was addressed with improved memory handling. This issue is fixed in watchOS 9.3, tvOS 16.3,     macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3. Processing web content may lead to arbitrary code execution.
    (CVE-2023-32393)

  - The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.2, watchOS 9.3, iOS     15.7.2 and iPadOS 15.7.2, Safari 16.3, tvOS 16.3, iOS 16.3 and iPadOS 16.3. Processing maliciously crafted     web content may lead to arbitrary code execution. (CVE-2023-23496)

  - The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.3, macOS     Ventura 13.2, watchOS 9.3, macOS Big Sur 11.7.3, Safari 16.3, tvOS 16.3, iOS 16.3 and iPadOS 16.3.
    Processing maliciously crafted web content may lead to arbitrary code execution. (CVE-2023-23517,     CVE-2023-23518)

  - The issue was addressed with improved memory handling This issue is fixed in macOS Ventura 13.2. An app     may be able to disclose kernel memory. (CVE-2023-23501)

  - The issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.7.3, macOS     Ventura 13.2, macOS Monterey 12.6.3. An app may be able to bypass Privacy preferences. (CVE-2023-23508)

  - Inappropriate implementation in Navigation in Google Chrome prior to 97.0.4692.71 allowed a remote     attacker to leak cross-origin data via a crafted HTML page. (CVE-2022-0108)

Note that Nessus has not tested for these issues but has instead relied only on the operating system's self-reported version number.

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:0014-1 advisory.

  - Use after free in Storage. (CVE-2022-0096)

  - Inappropriate implementation in DevTools. (CVE-2022-0097)

  - Use after free in Screen Capture. (CVE-2022-0098)

  - Use after free in Sign-in. (CVE-2022-0099)

  - Heap buffer overflow in Media streams API. (CVE-2022-0100)

  - Heap buffer overflow in Bookmarks. (CVE-2022-0101)

  - Type Confusion in V8 . (CVE-2022-0102)

  - Use after free in SwiftShader. (CVE-2022-0103)

  - Heap buffer overflow in ANGLE. (CVE-2022-0104)

  - Use after free in PDF. (CVE-2022-0105)

  - Use after free in Autofill. (CVE-2022-0106)

  - Use after free in File Manager API. (CVE-2022-0107)

  - Inappropriate implementation in Navigation. (CVE-2022-0108, CVE-2022-0111)

  - Inappropriate implementation in Autofill. (CVE-2022-0109)

  - Incorrect security UI in Autofill. (CVE-2022-0110)

  - Incorrect security UI in Browser UI. (CVE-2022-0112)

  - Inappropriate implementation in Blink. (CVE-2022-0113)

  - Out of bounds memory access in Web Serial. (CVE-2022-0114)

  - Uninitialized Use in File API. (CVE-2022-0115)

  - Inappropriate implementation in Compositing. (CVE-2022-0116)

  - Policy bypass in Service Workers. (CVE-2022-0117)

  - Inappropriate implementation in WebShare. (CVE-2022-0118)

  - Inappropriate implementation in Passwords. (CVE-2022-0120)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5046 advisory.

  - Use after free in Offline use in Google Chrome on Android prior to 94.0.4606.54 allowed a remote attacker     who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.
    (CVE-2021-37956)

  - Use after free in WebGPU in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (CVE-2021-37957)

  - Inappropriate implementation in Navigation in Google Chrome on Windows prior to 94.0.4606.54 allowed a     remote attacker to inject scripts or HTML into a privileged page via a crafted HTML page. (CVE-2021-37958)

  - Use after free in Task Manager in Google Chrome prior to 94.0.4606.54 allowed an attacker who convinced a     user to enage in a series of user gestures to potentially exploit heap corruption via a crafted HTML page.
    (CVE-2021-37959)

  - Use after free in Tab Strip in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2021-37961)

  - Use after free in Performance Manager in Google Chrome prior to 94.0.4606.54 allowed a remote attacker who     had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.
    (CVE-2021-37962)

  - Side-channel information leakage in DevTools in Google Chrome prior to 94.0.4606.54 allowed a remote     attacker to bypass site isolation via a crafted HTML page. (CVE-2021-37963)

  - Inappropriate implementation in ChromeOS Networking in Google Chrome on ChromeOS prior to 94.0.4606.54     allowed an attacker with a rogue wireless access point to to potentially carryout a wifi impersonation     attack via a crafted ONC file. (CVE-2021-37964)

  - Inappropriate implementation in Background Fetch API in Google Chrome prior to 94.0.4606.54 allowed a     remote attacker to leak cross-origin data via a crafted HTML page. (CVE-2021-37965, CVE-2021-37968)

  - Inappropriate implementation in Compositing in Google Chrome on Android prior to 94.0.4606.54 allowed a     remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (CVE-2021-37966)

  - Inappropriate implementation in Background Fetch API in Google Chrome prior to 94.0.4606.54 allowed a     remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML     page. (CVE-2021-37967)

  - Inappropriate implementation in Google Updater in Google Chrome on Windows prior to 94.0.4606.54 allowed a     remote attacker to perform local privilege escalation via a crafted file. (CVE-2021-37969)

  - Use after free in File System API in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2021-37970)

  - Incorrect security UI in Web Browser UI in Google Chrome prior to 94.0.4606.54 allowed a remote attacker     to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (CVE-2021-37971)

  - Out of bounds read in libjpeg-turbo in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2021-37972)

  - Use after free in Portals in Google Chrome prior to 94.0.4606.61 allowed a remote attacker who had     compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
    (CVE-2021-37973)

  - Use after free in Safebrowsing in Google Chrome prior to 94.0.4606.71 allowed a remote attacker who had     compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.
    (CVE-2021-37974)

  - Use after free in V8 in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (CVE-2021-37975)

  - Inappropriate implementation in Memory in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to     obtain potentially sensitive information from process memory via a crafted HTML page. (CVE-2021-37976)

  - Use after free in Garbage Collection in Google Chrome prior to 94.0.4606.81 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2021-37977)

  - Heap buffer overflow in Blink in Google Chrome prior to 94.0.4606.81 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2021-37978)

  - heap buffer overflow in WebRTC in Google Chrome prior to 94.0.4606.81 allowed a remote attacker who     convinced a user to browse to a malicious website to potentially exploit heap corruption via a crafted     HTML page. (CVE-2021-37979)

  - Inappropriate implementation in Sandbox in Google Chrome prior to 94.0.4606.81 allowed a remote attacker     to potentially bypass site isolation via Windows. (CVE-2021-37980)

  - Heap buffer overflow in Skia in Google Chrome prior to 95.0.4638.54 allowed a remote attacker who had     compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
    (CVE-2021-37981)

  - Use after free in Incognito in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2021-37982)

  - Use after free in Dev Tools in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2021-37983)

  - Heap buffer overflow in PDFium in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2021-37984)

  - Use after free in V8 in Google Chrome prior to 95.0.4638.54 allowed a remote attacker who had convinced a     user to allow for connection to debugger to potentially exploit heap corruption via a crafted HTML page.
    (CVE-2021-37985)

  - Heap buffer overflow in Settings in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to     engage with Dev Tools to potentially exploit heap corruption via a crafted HTML page. (CVE-2021-37986)

  - Use after free in Network APIs in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2021-37987)

  - Use after free in Profiles in Google Chrome prior to 95.0.4638.54 allowed a remote attacker who convinced     a user to engage in specific gestures to potentially exploit heap corruption via a crafted HTML page.
    (CVE-2021-37988)

  - Inappropriate implementation in Blink in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to     abuse content security policy via a crafted HTML page. (CVE-2021-37989)

  - Inappropriate implementation in WebView in Google Chrome on Android prior to 95.0.4638.54 allowed a remote     attacker to leak cross-origin data via a crafted app. (CVE-2021-37990)

  - Race in V8 in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially exploit heap     corruption via a crafted HTML page. (CVE-2021-37991)

  - Out of bounds read in WebAudio in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2021-37992)

  - Use after free in PDF Accessibility in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2021-37993)

  - Inappropriate implementation in iFrame Sandbox in Google Chrome prior to 95.0.4638.54 allowed a remote     attacker to bypass navigation restrictions via a crafted HTML page. (CVE-2021-37994)

  - Inappropriate implementation in WebApp Installer in Google Chrome prior to 95.0.4638.54 allowed a remote     attacker to potentially overlay and spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
    (CVE-2021-37995)

  - Insufficient validation of untrusted input Downloads in Google Chrome prior to 95.0.4638.54 allowed a     remote attacker to bypass navigation restrictions via a malicious file. (CVE-2021-37996)

  - Use after free in Sign-In in Google Chrome prior to 95.0.4638.69 allowed a remote attacker who convinced a     user to sign into Chrome to potentially exploit heap corruption via a crafted HTML page. (CVE-2021-37997)

  - Use after free in Garbage Collection in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2021-37998)

  - Insufficient data validation in New Tab Page in Google Chrome prior to 95.0.4638.69 allowed a remote     attacker to inject arbitrary scripts or HTML in a new browser tab via a crafted HTML page.
    (CVE-2021-37999)

  - Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 95.0.4638.69     allowed a remote attacker to arbitrarily browser to a malicious URL via a crafted HTML page.
    (CVE-2021-38000)

  - Type confusion in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (CVE-2021-38001)

  - Use after free in Web Transport in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to     potentially perform a sandbox escape via a crafted HTML page. (CVE-2021-38002)

  - Inappropriate implementation in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2021-38003)

  - Insufficient policy enforcement in Autofill in Google Chrome prior to 95.0.4638.69 allowed a remote     attacker to leak cross-origin data via a crafted HTML page. (CVE-2021-38004)

  - Use after free in loader in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (CVE-2021-38005)

  - Use after free in storage foundation in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2021-38006, CVE-2021-38011)

  - Type confusion in V8 in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (CVE-2021-38007, CVE-2021-38012)

  - Use after free in media in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (CVE-2021-38008)

  - Inappropriate implementation in cache in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to     leak cross-origin data via a crafted HTML page. (CVE-2021-38009)

  - Inappropriate implementation in service workers in Google Chrome prior to 96.0.4664.45 allowed a remote     attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.
    (CVE-2021-38010)

  - Heap buffer overflow in fingerprint recognition in Google Chrome on ChromeOS prior to 96.0.4664.45 allowed     a remote attacker who had compromised a WebUI renderer process to potentially perform a sandbox escape via     a crafted HTML page. (CVE-2021-38013)

  - Out of bounds write in Swiftshader in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2021-38014)

  - Inappropriate implementation in input in Google Chrome prior to 96.0.4664.45 allowed an attacker who     convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome     Extension. (CVE-2021-38015)

  - Insufficient policy enforcement in background fetch in Google Chrome prior to 96.0.4664.45 allowed a     remote attacker to bypass same origin policy via a crafted HTML page. (CVE-2021-38016)

  - Insufficient policy enforcement in iframe sandbox in Google Chrome prior to 96.0.4664.45 allowed a remote     attacker to bypass navigation restrictions via a crafted HTML page. (CVE-2021-38017)

  - Inappropriate implementation in navigation in Google Chrome prior to 96.0.4664.45 allowed a remote     attacker to perform domain spoofing via a crafted HTML page. (CVE-2021-38018)

  - Insufficient policy enforcement in CORS in Google Chrome prior to 96.0.4664.45 allowed a remote attacker     to leak cross-origin data via a crafted HTML page. (CVE-2021-38019)

  - Insufficient policy enforcement in contacts picker in Google Chrome on Android prior to 96.0.4664.45     allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
    (CVE-2021-38020)

  - Inappropriate implementation in referrer in Google Chrome prior to 96.0.4664.45 allowed a remote attacker     to bypass navigation restrictions via a crafted HTML page. (CVE-2021-38021)

  - Inappropriate implementation in WebAuthentication in Google Chrome prior to 96.0.4664.45 allowed a remote     attacker to leak cross-origin data via a crafted HTML page. (CVE-2021-38022)

  - Use after free in web apps in Google Chrome prior to 96.0.4664.93 allowed an attacker who convinced a user     to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension.
    (CVE-2021-4052)

  - Use after free in UI in Google Chrome on Linux prior to 96.0.4664.93 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2021-4053)

  - Incorrect security UI in autofill in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to     perform domain spoofing via a crafted HTML page. (CVE-2021-4054)

  - Heap buffer overflow in extensions in Google Chrome prior to 96.0.4664.93 allowed an attacker who     convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted     Chrome Extension. (CVE-2021-4055)

  - Type confusion in loader in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (CVE-2021-4056)

  - Use after free in file API in Google Chrome prior to 96.0.4664.93 allowed a remote attacker who had     compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.
    (CVE-2021-4057)

  - Heap buffer overflow in ANGLE in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2021-4058)

  - Insufficient data validation in loader in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to     leak cross-origin data via a crafted HTML page. (CVE-2021-4059)

  - Type confusion in V8 in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (CVE-2021-4061, CVE-2021-4078)

  - Heap buffer overflow in BFCache in Google Chrome prior to 96.0.4664.93 allowed a remote attacker who had     compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.
    (CVE-2021-4062)

  - Use after free in developer tools in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2021-4063)

  - Use after free in screen capture in Google Chrome on ChromeOS prior to 96.0.4664.93 allowed a remote     attacker to potentially exploit heap corruption via a crafted HTML page. (CVE-2021-4064)

  - Use after free in autofill in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (CVE-2021-4065)

  - Integer underflow in ANGLE in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (CVE-2021-4066)

  - Use after free in window manager in Google Chrome on ChromeOS prior to 96.0.4664.93 allowed a remote     attacker to potentially exploit heap corruption via a crafted HTML page. (CVE-2021-4067)

  - Insufficient data validation in new tab page in Google Chrome prior to 96.0.4664.93 allowed a remote     attacker to leak cross-origin data via a crafted HTML page. (CVE-2021-4068)

  - Out of bounds write in WebRTC in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to     potentially exploit heap corruption via crafted WebRTC packets. (CVE-2021-4079)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Microsoft Edge installed on the remote Windows host is prior to 97.0.1072.55. It is, therefore, affected by multiple vulnerabilities as referenced in the January 6, 2022 advisory.

  - Use after free in File Manager API in Google Chrome on Chrome OS prior to 97.0.4692.71 allowed an attacker     who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted     HTML page. (CVE-2022-0107)

  - Use after free in Storage in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (CVE-2022-0096)

  - Inappropriate implementation in DevTools in Google Chrome prior to 97.0.4692.71 allowed an attacker who     convinced a user to install a malicious extension to to potentially allow extension to escape the sandbox     via a crafted HTML page. (CVE-2022-0097)

  - Use after free in Screen Capture in Google Chrome on Chrome OS prior to 97.0.4692.71 allowed an attacker     who convinced a user to perform specific user gestures to potentially exploit heap corruption via specific     user gestures. (CVE-2022-0098)

  - Use after free in Sign-in in Google Chrome prior to 97.0.4692.71 allowed a remote attacker who convinced a     user to perform specific user gestures to potentially exploit heap corruption via specific user gesture.
    (CVE-2022-0099)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 9eeccbf3-6e26-11ec-bb10-3065ec8fd3ec advisory.

  - Use after free in File Manager API in Google Chrome on Chrome OS prior to 97.0.4692.71 allowed an attacker     who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted     HTML page. (CVE-2022-0107)

  - Use after free in Storage in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (CVE-2022-0096)

  - Inappropriate implementation in DevTools in Google Chrome prior to 97.0.4692.71 allowed an attacker who     convinced a user to install a malicious extension to to potentially allow extension to escape the sandbox     via a crafted HTML page. (CVE-2022-0097)

  - Use after free in Screen Capture in Google Chrome on Chrome OS prior to 97.0.4692.71 allowed an attacker     who convinced a user to perform specific user gestures to potentially exploit heap corruption via specific     user gestures. (CVE-2022-0098)

  - Use after free in Sign-in in Google Chrome prior to 97.0.4692.71 allowed a remote attacker who convinced a     user to perform specific user gestures to potentially exploit heap corruption via specific user gesture.
    (CVE-2022-0099)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Google Chrome installed on the remote Windows host is prior to 97.0.4692.71. It is, therefore, affected by multiple vulnerabilities as referenced in the 2022_01_stable-channel-update-for-desktop advisory.

  - Use after free in File Manager API in Google Chrome on Chrome OS prior to 97.0.4692.71 allowed an attacker     who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted     HTML page. (CVE-2022-0107)

  - Use after free in Storage in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (CVE-2022-0096)

  - Inappropriate implementation in DevTools in Google Chrome prior to 97.0.4692.71 allowed an attacker who     convinced a user to install a malicious extension to to potentially allow extension to escape the sandbox     via a crafted HTML page. (CVE-2022-0097)

  - Use after free in Screen Capture in Google Chrome on Chrome OS prior to 97.0.4692.71 allowed an attacker     who convinced a user to perform specific user gestures to potentially exploit heap corruption via specific     user gestures. (CVE-2022-0098)

  - Use after free in Sign-in in Google Chrome prior to 97.0.4692.71 allowed a remote attacker who convinced a     user to perform specific user gestures to potentially exploit heap corruption via specific user gesture.
    (CVE-2022-0099)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Google Chrome installed on the remote macOS host is prior to 97.0.4692.71. It is, therefore, affected by multiple vulnerabilities as referenced in the 2022_01_stable-channel-update-for-desktop advisory.

  - Use after free in File Manager API in Google Chrome on Chrome OS prior to 97.0.4692.71 allowed an attacker     who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted     HTML page. (CVE-2022-0107)

  - Use after free in Storage in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (CVE-2022-0096)

  - Inappropriate implementation in DevTools in Google Chrome prior to 97.0.4692.71 allowed an attacker who     convinced a user to install a malicious extension to to potentially allow extension to escape the sandbox     via a crafted HTML page. (CVE-2022-0097)

  - Use after free in Screen Capture in Google Chrome on Chrome OS prior to 97.0.4692.71 allowed an attacker     who convinced a user to perform specific user gestures to potentially exploit heap corruption via specific     user gestures. (CVE-2022-0098)

  - Use after free in Sign-in in Google Chrome prior to 97.0.4692.71 allowed a remote attacker who convinced a     user to perform specific user gestures to potentially exploit heap corruption via specific user gesture.
    (CVE-2022-0099)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
276044	TencentOS Server 2: webkitgtk4 (TSSA-2025:0554)	Nessus	Tencent Local Security Checks	critical
246607	Linux Distros Unpatched Vulnerability : CVE-2022-0108	Nessus	Misc.	medium
241427	RHEL 7 : webkitgtk4 (RHSA-2025:10364)	Nessus	Red Hat Local Security Checks	critical
200523	Apple TV < 16.3 Multiple Vulnerabilities (HT213601)	Nessus	Misc.	high
701458	Safari < 16.3 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	high
175656	Debian dla-3419 : gir1.2-javascriptcoregtk-4.0 - security update	Nessus	Debian Local Security Checks	high
175285	Ubuntu 20.04 LTS / 22.04 LTS / 23.04 : WebKitGTK vulnerabilities (USN-6061-1)	Nessus	Ubuntu Local Security Checks	high
175137	Fedora 36 : webkit2gtk3 (2023-8900b35c6f)	Nessus	Fedora Local Security Checks	high
175078	Debian DSA-5397-1 : wpewebkit - security update	Nessus	Debian Local Security Checks	high
175077	Debian DSA-5396-1 : webkit2gtk - security update	Nessus	Debian Local Security Checks	high
174980	SUSE SLES15 Security Update : webkit2gtk3 (SUSE-SU-2023:2078-1)	Nessus	SuSE Local Security Checks	high
174979	SUSE SLES15 / openSUSE 15 Security Update : webkit2gtk3 (SUSE-SU-2023:2077-1)	Nessus	SuSE Local Security Checks	high
174958	Fedora 37 : webkitgtk (2023-a4bbf02a57)	Nessus	Fedora Local Security Checks	high
174948	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : webkit2gtk3 (SUSE-SU-2023:2065-1)	Nessus	SuSE Local Security Checks	high
174918	SUSE SLES12 Security Update : webkit2gtk3 (SUSE-SU-2023:2056-1)	Nessus	SuSE Local Security Checks	high
174639	Fedora 38 : webkitgtk (2023-5b61346bbe)	Nessus	Fedora Local Security Checks	high
170573	Apple iOS < 16.3 Multiple Vulnerabilities (HT213606)	Nessus	Mobile Devices	high
170445	macOS 13.x < 13.2 Multiple Vulnerabilities (HT213605)	Nessus	MacOS X Local Security Checks	critical
157241	GLSA-202201-02 : Chromium, Google Chrome: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	critical
156781	openSUSE 15 Security Update : chromium (openSUSE-SU-2022:0014-1)	Nessus	SuSE Local Security Checks	critical
156763	Debian DSA-5046-1 : chromium - security update	Nessus	Debian Local Security Checks	critical
156545	Microsoft Edge (Chromium) < 97.0.1072.55 Multiple Vulnerabilities	Nessus	Windows	critical
156469	FreeBSD : chromium -- multiple vulnerabilities (9eeccbf3-6e26-11ec-bb10-3065ec8fd3ec)	Nessus	FreeBSD Local Security Checks	critical
156462	Google Chrome < 97.0.4692.71 Multiple Vulnerabilities	Nessus	Windows	critical
156461	Google Chrome < 97.0.4692.71 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	critical

Detections

Analytics

CVE-2022-0108

medium

Tenable Plugins

critical

medium

critical

high

high

high

high

high

high

high

high

high

high

high

high

high

high

critical

critical

critical

critical

critical

critical

critical

critical