Inappropriate implementation in Storage in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - Expat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer, for configurations with
    a nonzero XML_CONTEXT_BYTES. (CVE-2022-23852)

  - Heap buffer overflow in Media streams API in Google Chrome prior to 97.0.4692.71 allowed a remote attacker
    to potentially exploit heap corruption via a crafted HTML page. (CVE-2022-0100)

  - Type confusion in V8 in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially
    exploit heap corruption via a crafted HTML page. (CVE-2022-0102)

  - Use after free in SwiftShader in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to
    potentially exploit heap corruption via a crafted HTML page. (CVE-2022-0103)

  - Heap buffer overflow in ANGLE in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to
    potentially exploit heap corruption via a crafted HTML page. (CVE-2022-0104)

The remote host is affected by the vulnerability described in GLSA-202201-02 (Chromium, Google Chrome: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Chromium                       and Google Chrome. Please review the CVE identifiers referenced below                       for details.

Tenable has extracted the preceding description block directly from the Gentoo Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:0019-1 advisory.

    Chromium 97.0.4692.99 (boo#1194919):

    * CVE-2022-0289: Use after free in Safe browsing
    * CVE-2022-0290: Use after free in Site isolation
    * CVE-2022-0291: Inappropriate implementation in Storage
    * CVE-2022-0292: Inappropriate implementation in Fenced Frames
    * CVE-2022-0293: Use after free in Web packaging
    * CVE-2022-0294: Inappropriate implementation in Push messaging
    * CVE-2022-0295: Use after free in Omnibox
    * CVE-2022-0296: Use after free in Printing
    * CVE-2022-0297: Use after free in Vulkan
    * CVE-2022-0298: Use after free in Scheduling
    * CVE-2022-0300: Use after free in Text Input Method Editor
    * CVE-2022-0301: Heap buffer overflow in DevTools
    * CVE-2022-0302: Use after free in Omnibox
    * CVE-2022-0303: Race in GPU Watchdog
    * CVE-2022-0304: Use after free in Bookmarks
    * CVE-2022-0305: Inappropriate implementation in Service Worker API
    * CVE-2022-0306: Heap buffer overflow in PDFium
    * CVE-2022-0307: Use after free in Optimization Guide
    * CVE-2022-0308: Use after free in Data Transfer
    * CVE-2022-0309: Inappropriate implementation in Autofill
    * CVE-2022-0310: Heap buffer overflow in Task Manager
    * CVE-2022-0311: Heap buffer overflow in Task Manager

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Google Chrome installed on the remote Windows host is prior to 97.0.4692.99. It is, therefore, affected by multiple vulnerabilities as referenced in the 2022_01_stable-channel-update-for-desktop_19 advisory.

  - Heap buffer overflow in Task Manager in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who     convinced a user to engage in specific user interaction to potentially exploit heap corruption via a     crafted HTML page. (CVE-2022-0311)

  - Use after free in Site isolation in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to     potentially perform a sandbox escape via a crafted HTML page. (CVE-2022-0290)

  - Use after free in Safe browsing in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2022-0289)

  - Inappropriate implementation in Storage in Google Chrome prior to 97.0.4692.99 allowed a remote attacker     who had compromised the renderer process to bypass site isolation via a crafted HTML page. (CVE-2022-0291)

  - Inappropriate implementation in Fenced Frames in Google Chrome prior to 97.0.4692.99 allowed a remote     attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML     page. (CVE-2022-0292)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Google Chrome installed on the remote macOS host is prior to 97.0.4692.99. It is, therefore, affected by multiple vulnerabilities as referenced in the 2022_01_stable-channel-update-for-desktop_19 advisory.

  - Heap buffer overflow in Task Manager in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who     convinced a user to engage in specific user interaction to potentially exploit heap corruption via a     crafted HTML page. (CVE-2022-0311)

  - Use after free in Site isolation in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to     potentially perform a sandbox escape via a crafted HTML page. (CVE-2022-0290)

  - Use after free in Safe browsing in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2022-0289)

  - Inappropriate implementation in Storage in Google Chrome prior to 97.0.4692.99 allowed a remote attacker     who had compromised the renderer process to bypass site isolation via a crafted HTML page. (CVE-2022-0291)

  - Inappropriate implementation in Fenced Frames in Google Chrome prior to 97.0.4692.99 allowed a remote     attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML     page. (CVE-2022-0292)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Google Chrome installed on the remote macOS host is prior to 96.0.4664.110. It is, therefore, affected by multiple vulnerabilities as referenced in the 2022_01_stable-channel-update-for-desktop_19 advisory.

  - Heap buffer overflow in Task Manager in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who     convinced a user to engage in specific user interaction to potentially exploit heap corruption via a     crafted HTML page. (CVE-2022-0311)

  - Use after free in Site isolation in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to     potentially perform a sandbox escape via a crafted HTML page. (CVE-2022-0290)

  - Use after free in Safe browsing in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2022-0289)

  - Inappropriate implementation in Storage in Google Chrome prior to 97.0.4692.99 allowed a remote attacker     who had compromised the renderer process to bypass site isolation via a crafted HTML page. (CVE-2022-0291)

  - Inappropriate implementation in Fenced Frames in Google Chrome prior to 97.0.4692.99 allowed a remote     attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML     page. (CVE-2022-0292)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Google Chrome installed on the remote Windows host is prior to 96.0.4664.110. It is, therefore, affected by multiple vulnerabilities as referenced in the 2022_01_stable-channel-update-for-desktop_19 advisory.

  - Heap buffer overflow in Task Manager in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who     convinced a user to engage in specific user interaction to potentially exploit heap corruption via a     crafted HTML page. (CVE-2022-0311)

  - Use after free in Site isolation in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to     potentially perform a sandbox escape via a crafted HTML page. (CVE-2022-0290)

  - Use after free in Safe browsing in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2022-0289)

  - Inappropriate implementation in Storage in Google Chrome prior to 97.0.4692.99 allowed a remote attacker     who had compromised the renderer process to bypass site isolation via a crafted HTML page. (CVE-2022-0291)

  - Inappropriate implementation in Fenced Frames in Google Chrome prior to 97.0.4692.99 allowed a remote     attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML     page. (CVE-2022-0292)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
406852	Alpine: qt5-qtwebengine: security update to 5.15.3_git20220121-r4	Tenable Cloud Security	Alpine Linux Local Security Checks	critical
406852	Alpine: qt5-qtwebengine: security update to 5.15.3_git20220121-r4	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	critical
406849	Alpine: multiple qt5-qtwebengine packages: security update to 5.15.3_git20211127-r4	Tenable Cloud Security	Alpine Linux Local Security Checks	critical
406849	Alpine: multiple qt5-qtwebengine packages: security update to 5.15.3_git20211127-r4	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	critical
157241	GLSA-202201-02 : Chromium, Google Chrome: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	critical
157082	openSUSE 15 Security Update : chromium (openSUSE-SU-2022:0019-1)	Nessus	SuSE Local Security Checks	critical
156862	Google Chrome < 97.0.4692.99 Multiple Vulnerabilities	Nessus	Windows	critical
156861	Google Chrome < 97.0.4692.99 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	critical
156034	Google Chrome < 96.0.4664.110 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	critical
156033	Google Chrome < 96.0.4664.110 Multiple Vulnerabilities	Nessus	Windows	critical

Detections

Analytics

CVE-2022-0291

medium

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical