Heap buffer overflow in Task Manager in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially exploit heap corruption via specific user interactions.

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:0019-1 advisory.

  - Use after free in Safe browsing. (CVE-2022-0289)

  - Use after free in Site isolation. (CVE-2022-0290)

  - Inappropriate implementation in Storage. (CVE-2022-0291)

  - Inappropriate implementation in Fenced Frames. (CVE-2022-0292)

  - Use after free in Web packaging. (CVE-2022-0293)

  - Inappropriate implementation in Push messaging. (CVE-2022-0294)

  - Use after free in Omnibox. (CVE-2022-0295, CVE-2022-0302)

  - Use after free in Printing. (CVE-2022-0296)

  - Use after free in Vulkan. (CVE-2022-0297)

  - Use after free in Scheduling. (CVE-2022-0298)

  - Use after free in Text Input Method Editor. (CVE-2022-0300)

  - Heap buffer overflow in DevTools. (CVE-2022-0301)

  - Race in GPU Watchdog. (CVE-2022-0303)

  - Use after free in Bookmarks. (CVE-2022-0304)

  - Inappropriate implementation in Service Worker API. (CVE-2022-0305)

  - Heap buffer overflow in PDFium. (CVE-2022-0306)

  - Use after free in Optimization Guide. (CVE-2022-0307)

  - Use after free in Data Transfer. (CVE-2022-0308)

  - Inappropriate implementation in Autofill. (CVE-2022-0309)

  - Heap buffer overflow in Task Manager. (CVE-2022-0310, CVE-2022-0311)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Google Chrome installed on the remote Windows host is prior to 97.0.4692.99. It is, therefore, affected by multiple vulnerabilities as referenced in the 2022_01_stable-channel-update-for-desktop_19 advisory.

  - Use after free in Data Transfer in Google Chrome on Chrome OS prior to 97.0.4692.99 allowed a remote     attacker who convinced a user to engage in specific user interaction to potentially exploit heap     corruption via a crafted HTML page. (CVE-2022-0308)

  - Use after free in Safe browsing in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2022-0289)

  - Use after free in Site isolation in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to     potentially perform a sandbox escape via a crafted HTML page. (CVE-2022-0290)

  - Inappropriate implementation in Storage in Google Chrome prior to 97.0.4692.99 allowed a remote attacker     who had compromised the renderer process to bypass site isolation via a crafted HTML page. (CVE-2022-0291)

  - Inappropriate implementation in Fenced Frames in Google Chrome prior to 97.0.4692.99 allowed a remote     attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML     page. (CVE-2022-0292)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Google Chrome installed on the remote macOS host is prior to 97.0.4692.99. It is, therefore, affected by multiple vulnerabilities as referenced in the 2022_01_stable-channel-update-for-desktop_19 advisory.

  - Use after free in Data Transfer in Google Chrome on Chrome OS prior to 97.0.4692.99 allowed a remote     attacker who convinced a user to engage in specific user interaction to potentially exploit heap     corruption via a crafted HTML page. (CVE-2022-0308)

  - Use after free in Safe browsing in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2022-0289)

  - Use after free in Site isolation in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to     potentially perform a sandbox escape via a crafted HTML page. (CVE-2022-0290)

  - Inappropriate implementation in Storage in Google Chrome prior to 97.0.4692.99 allowed a remote attacker     who had compromised the renderer process to bypass site isolation via a crafted HTML page. (CVE-2022-0291)

  - Inappropriate implementation in Fenced Frames in Google Chrome prior to 97.0.4692.99 allowed a remote     attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML     page. (CVE-2022-0292)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
157241	GLSA-202201-02 : Chromium, Google Chrome: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	critical
157082	openSUSE 15 Security Update : chromium (openSUSE-SU-2022:0019-1)	Nessus	SuSE Local Security Checks	critical
156862	Google Chrome < 97.0.4692.99 Multiple Vulnerabilities	Nessus	Windows	critical
156861	Google Chrome < 97.0.4692.99 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	critical

Detections

Analytics

CVE-2022-0310

high

Tenable Plugins

critical

critical

critical

critical