Use after free in Vulkan in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

The remote host is affected by the vulnerability described in GLSA-202201-02 (Chromium, Google Chrome: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Chromium                       and Google Chrome. Please review the CVE identifiers referenced below                       for details.

Tenable has extracted the preceding description block directly from the Gentoo Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:0019-1 advisory.

    Chromium 97.0.4692.99 (boo#1194919):

    * CVE-2022-0289: Use after free in Safe browsing
    * CVE-2022-0290: Use after free in Site isolation
    * CVE-2022-0291: Inappropriate implementation in Storage
    * CVE-2022-0292: Inappropriate implementation in Fenced Frames
    * CVE-2022-0293: Use after free in Web packaging
    * CVE-2022-0294: Inappropriate implementation in Push messaging
    * CVE-2022-0295: Use after free in Omnibox
    * CVE-2022-0296: Use after free in Printing
    * CVE-2022-0297: Use after free in Vulkan
    * CVE-2022-0298: Use after free in Scheduling
    * CVE-2022-0300: Use after free in Text Input Method Editor
    * CVE-2022-0301: Heap buffer overflow in DevTools
    * CVE-2022-0302: Use after free in Omnibox
    * CVE-2022-0303: Race in GPU Watchdog
    * CVE-2022-0304: Use after free in Bookmarks
    * CVE-2022-0305: Inappropriate implementation in Service Worker API
    * CVE-2022-0306: Heap buffer overflow in PDFium
    * CVE-2022-0307: Use after free in Optimization Guide
    * CVE-2022-0308: Use after free in Data Transfer
    * CVE-2022-0309: Inappropriate implementation in Autofill
    * CVE-2022-0310: Heap buffer overflow in Task Manager
    * CVE-2022-0311: Heap buffer overflow in Task Manager

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Google Chrome installed on the remote Windows host is prior to 97.0.4692.99. It is, therefore, affected by multiple vulnerabilities as referenced in the 2022_01_stable-channel-update-for-desktop_19 advisory.

  - Heap buffer overflow in Task Manager in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who     convinced a user to engage in specific user interaction to potentially exploit heap corruption via a     crafted HTML page. (CVE-2022-0311)

  - Use after free in Site isolation in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to     potentially perform a sandbox escape via a crafted HTML page. (CVE-2022-0290)

  - Use after free in Safe browsing in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2022-0289)

  - Inappropriate implementation in Storage in Google Chrome prior to 97.0.4692.99 allowed a remote attacker     who had compromised the renderer process to bypass site isolation via a crafted HTML page. (CVE-2022-0291)

  - Inappropriate implementation in Fenced Frames in Google Chrome prior to 97.0.4692.99 allowed a remote     attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML     page. (CVE-2022-0292)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Google Chrome installed on the remote macOS host is prior to 97.0.4692.99. It is, therefore, affected by multiple vulnerabilities as referenced in the 2022_01_stable-channel-update-for-desktop_19 advisory.

  - Heap buffer overflow in Task Manager in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who     convinced a user to engage in specific user interaction to potentially exploit heap corruption via a     crafted HTML page. (CVE-2022-0311)

  - Use after free in Site isolation in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to     potentially perform a sandbox escape via a crafted HTML page. (CVE-2022-0290)

  - Use after free in Safe browsing in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2022-0289)

  - Inappropriate implementation in Storage in Google Chrome prior to 97.0.4692.99 allowed a remote attacker     who had compromised the renderer process to bypass site isolation via a crafted HTML page. (CVE-2022-0291)

  - Inappropriate implementation in Fenced Frames in Google Chrome prior to 97.0.4692.99 allowed a remote     attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML     page. (CVE-2022-0292)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Google Chrome installed on the remote macOS host is prior to 96.0.4664.110. It is, therefore, affected by multiple vulnerabilities as referenced in the 2022_01_stable-channel-update-for-desktop_19 advisory.

  - Heap buffer overflow in Task Manager in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who     convinced a user to engage in specific user interaction to potentially exploit heap corruption via a     crafted HTML page. (CVE-2022-0311)

  - Use after free in Site isolation in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to     potentially perform a sandbox escape via a crafted HTML page. (CVE-2022-0290)

  - Use after free in Safe browsing in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2022-0289)

  - Inappropriate implementation in Storage in Google Chrome prior to 97.0.4692.99 allowed a remote attacker     who had compromised the renderer process to bypass site isolation via a crafted HTML page. (CVE-2022-0291)

  - Inappropriate implementation in Fenced Frames in Google Chrome prior to 97.0.4692.99 allowed a remote     attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML     page. (CVE-2022-0292)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Google Chrome installed on the remote Windows host is prior to 96.0.4664.110. It is, therefore, affected by multiple vulnerabilities as referenced in the 2022_01_stable-channel-update-for-desktop_19 advisory.

  - Heap buffer overflow in Task Manager in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who     convinced a user to engage in specific user interaction to potentially exploit heap corruption via a     crafted HTML page. (CVE-2022-0311)

  - Use after free in Site isolation in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to     potentially perform a sandbox escape via a crafted HTML page. (CVE-2022-0290)

  - Use after free in Safe browsing in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2022-0289)

  - Inappropriate implementation in Storage in Google Chrome prior to 97.0.4692.99 allowed a remote attacker     who had compromised the renderer process to bypass site isolation via a crafted HTML page. (CVE-2022-0291)

  - Inappropriate implementation in Fenced Frames in Google Chrome prior to 97.0.4692.99 allowed a remote     attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML     page. (CVE-2022-0292)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
157241	GLSA-202201-02 : Chromium, Google Chrome: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	Local	critical
157082	openSUSE 15 Security Update : chromium (openSUSE-SU-2022:0019-1)	Nessus	SuSE Local Security Checks	Local	critical
156862	Google Chrome < 97.0.4692.99 Multiple Vulnerabilities	Nessus	Windows	Local	critical
156861	Google Chrome < 97.0.4692.99 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	Local	critical
156034	Google Chrome < 96.0.4664.110 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	Local	critical
156033	Google Chrome < 96.0.4664.110 Multiple Vulnerabilities	Nessus	Windows	Local	critical

Detections

Analytics

CVE-2022-0297

high

Tenable Plugins

critical

critical

critical

critical

critical

critical