Use after free in WebAudio in Google Chrome prior to 119.0.6045.123 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

The remote host is affected by the vulnerability described in GLSA-202312-07 (QtWebEngine: Multiple Vulnerabilities)

  - Type Confusion in V8 in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to perform     arbitrary read/write via a crafted HTML page. (Chromium security severity: High) (CVE-2023-4068,     CVE-2023-4070)

  - Type Confusion in V8 in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2023-4069)

  - Heap buffer overflow in Visuals in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)     (CVE-2023-4071)

  - Out of bounds read and write in WebGL in Google Chrome prior to 115.0.5790.170 allowed a remote attacker     to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)     (CVE-2023-4072)

  - Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 115.0.5790.170 allowed a remote     attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity:
    High) (CVE-2023-4073)

  - Use after free in Blink Task Scheduling in Google Chrome prior to 115.0.5790.170 allowed a remote attacker     to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)     (CVE-2023-4074)

  - Use after free in Cast in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2023-4075)

  - Use after free in WebRTC in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially     exploit heap corruption via a crafted WebRTC session. (Chromium security severity: High) (CVE-2023-4076)

  - Insufficient data validation in Extensions in Google Chrome prior to 115.0.5790.170 allowed an attacker     who convinced a user to install a malicious extension to inject scripts or HTML into a privileged page via     a crafted Chrome Extension. (Chromium security severity: Medium) (CVE-2023-4077)

  - Inappropriate implementation in Extensions in Google Chrome prior to 115.0.5790.170 allowed an attacker     who convinced a user to install a malicious extension to inject scripts or HTML into a privileged page via     a crafted Chrome Extension. (Chromium security severity: Medium) (CVE-2023-4078)

  - Out of bounds memory access in FedCM in Google Chrome prior to 116.0.5845.179 allowed a remote attacker     who had compromised the renderer process to perform an out of bounds memory read via a crafted HTML page.
    (Chromium security severity: High) (CVE-2023-4761)

  - Type Confusion in V8 in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to execute     arbitrary code via a crafted HTML page. (Chromium security severity: High) (CVE-2023-4762)

  - Use after free in Networks in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)     (CVE-2023-4763)

  - Incorrect security UI in BFCache in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to     spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: High)     (CVE-2023-4764)

  - Use after free in Site Isolation in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)     (CVE-2023-5218)

  - Use after free in Cast in Google Chrome prior to 118.0.5993.70 allowed a remote attacker who had     compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium     security severity: Low) (CVE-2023-5473)

  - Heap buffer overflow in PDF in Google Chrome prior to 118.0.5993.70 allowed a remote attacker who     convinced a user to engage in specific user interactions to potentially exploit heap corruption via a     crafted PDF file. (Chromium security severity: Medium) (CVE-2023-5474)

  - Inappropriate implementation in DevTools in Google Chrome prior to 118.0.5993.70 allowed an attacker who     convinced a user to install a malicious extension to bypass discretionary access control via a crafted     Chrome Extension. (Chromium security severity: Medium) (CVE-2023-5475)

  - Use after free in Blink History in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)     (CVE-2023-5476)

  - Inappropriate implementation in Installer in Google Chrome prior to 118.0.5993.70 allowed a local attacker     to bypass discretionary access control via a crafted command. (Chromium security severity: Low)     (CVE-2023-5477)

  - Inappropriate implementation in Autofill in Google Chrome prior to 118.0.5993.70 allowed a remote attacker     to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low) (CVE-2023-5478)

  - Inappropriate implementation in Extensions API in Google Chrome prior to 118.0.5993.70 allowed an attacker     who convinced a user to install a malicious extension to bypass an enterprise policy via a crafted HTML     page. (Chromium security severity: Medium) (CVE-2023-5479)

  - Inappropriate implementation in Payments in Google Chrome prior to 119.0.6045.105 allowed a remote     attacker to bypass XSS preventions via a malicious file. (Chromium security severity: High)     (CVE-2023-5480)

  - Inappropriate implementation in Downloads in Google Chrome prior to 118.0.5993.70 allowed a remote     attacker to spoof security UI via a crafted HTML page. (Chromium security severity: Medium)     (CVE-2023-5481)

  - Insufficient data validation in USB in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to     perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)     (CVE-2023-5482)

  - Inappropriate implementation in Intents in Google Chrome prior to 118.0.5993.70 allowed a remote attacker     to bypass content security policy via a crafted HTML page. (Chromium security severity: Medium)     (CVE-2023-5483)

  - Inappropriate implementation in Navigation in Google Chrome prior to 118.0.5993.70 allowed a remote     attacker to spoof security UI via a crafted HTML page. (Chromium security severity: Medium)     (CVE-2023-5484)

  - Inappropriate implementation in Autofill in Google Chrome prior to 118.0.5993.70 allowed a remote attacker     to bypass autofill restrictions via a crafted HTML page. (Chromium security severity: Low) (CVE-2023-5485)

  - Inappropriate implementation in Input in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to     spoof security UI via a crafted HTML page. (Chromium security severity: Low) (CVE-2023-5486)

  - Inappropriate implementation in Fullscreen in Google Chrome prior to 118.0.5993.70 allowed an attacker who     convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome     Extension. (Chromium security severity: Medium) (CVE-2023-5487)

  - Integer overflow in USB in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2023-5849)

  - Incorrect security UI in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to     perform domain spoofing via a crafted domain name. (Chromium security severity: Medium) (CVE-2023-5850)

  - Inappropriate implementation in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote     attacker to obfuscate security UI via a crafted HTML page. (Chromium security severity: Medium)     (CVE-2023-5851)

  - Use after free in Printing in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who     convinced a user to engage in specific UI gestures to potentially exploit heap corruption via specific UI     gestures. (Chromium security severity: Medium) (CVE-2023-5852)

  - Incorrect security UI in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to     obfuscate security UI via a crafted HTML page. (Chromium security severity: Medium) (CVE-2023-5853)

  - Use after free in Profiles in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who     convinced a user to engage in specific UI gestures to potentially exploit heap corruption via specific UI     gestures. (Chromium security severity: Medium) (CVE-2023-5854)

  - Use after free in Reading Mode in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who     convinced a user to engage in specific UI gestures to potentially exploit heap corruption via specific UI     gestures. (Chromium security severity: Medium) (CVE-2023-5855)

  - Use after free in Side Panel in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who     convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted     HTML page. (Chromium security severity: Medium) (CVE-2023-5856)

  - Inappropriate implementation in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote     attacker to potentially execute arbitrary code via a malicious file. (Chromium security severity: Medium)     (CVE-2023-5857)

  - Inappropriate implementation in WebApp Provider in Google Chrome prior to 119.0.6045.105 allowed a remote     attacker to obfuscate security UI via a crafted HTML page. (Chromium security severity: Low)     (CVE-2023-5858)

  - Incorrect security UI in Picture In Picture in Google Chrome prior to 119.0.6045.105 allowed a remote     attacker to perform domain spoofing via a crafted local HTML page. (Chromium security severity: Low)     (CVE-2023-5859)

  - Use after free in WebAudio in Google Chrome prior to 119.0.6045.123 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)     (CVE-2023-5996)

  - Use after free in Garbage Collection in Google Chrome prior to 119.0.6045.159 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)     (CVE-2023-5997)

  - Use after free in Navigation in Google Chrome prior to 119.0.6045.159 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)     (CVE-2023-6112)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the a30f1a12-117f-4dac-a1d0-d65eaf084953 advisory.

  - Use after free in WebAudio in Google Chrome prior to 119.0.6045.123 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)     (CVE-2023-5996)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2023:0368-1 advisory.

  - Inappropriate implementation in Payments in Google Chrome prior to 119.0.6045.105 allowed a remote     attacker to bypass XSS preventions via a malicious file. (Chromium security severity: High)     (CVE-2023-5480)

  - Insufficient data validation in USB in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to     perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)     (CVE-2023-5482)

  - Integer overflow in USB in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2023-5849)

  - Incorrect security UI in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to     perform domain spoofing via a crafted domain name. (Chromium security severity: Medium) (CVE-2023-5850)

  - Inappropriate implementation in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote     attacker to obfuscate security UI via a crafted HTML page. (Chromium security severity: Medium)     (CVE-2023-5851)

  - Use after free in Printing in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who     convinced a user to engage in specific UI gestures to potentially exploit heap corruption via specific UI     gestures. (Chromium security severity: Medium) (CVE-2023-5852)

  - Incorrect security UI in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to     obfuscate security UI via a crafted HTML page. (Chromium security severity: Medium) (CVE-2023-5853)

  - Use after free in Profiles in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who     convinced a user to engage in specific UI gestures to potentially exploit heap corruption via specific UI     gestures. (Chromium security severity: Medium) (CVE-2023-5854)

  - Use after free in Reading Mode in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who     convinced a user to engage in specific UI gestures to potentially exploit heap corruption via specific UI     gestures. (Chromium security severity: Medium) (CVE-2023-5855)

  - Use after free in Side Panel in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who     convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted     HTML page. (Chromium security severity: Medium) (CVE-2023-5856)

  - Inappropriate implementation in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote     attacker to potentially execute arbitrary code via a malicious file. (Chromium security severity: Medium)     (CVE-2023-5857)

  - Inappropriate implementation in WebApp Provider in Google Chrome prior to 119.0.6045.105 allowed a remote     attacker to obfuscate security UI via a crafted HTML page. (Chromium security severity: Low)     (CVE-2023-5858)

  - Incorrect security UI in Picture In Picture in Google Chrome prior to 119.0.6045.105 allowed a remote     attacker to perform domain spoofing via a crafted local HTML page. (Chromium security severity: Low)     (CVE-2023-5859)

  - Use after free in WebAudio in Google Chrome prior to 119.0.6045.123 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)     (CVE-2023-5996)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-f83b5e84d3 advisory.

  - Inappropriate implementation in Payments in Google Chrome prior to 119.0.6045.105 allowed a remote     attacker to bypass XSS preventions via a malicious file. (Chromium security severity: High)     (CVE-2023-5480)

  - Insufficient data validation in USB in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to     perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)     (CVE-2023-5482)

  - Integer overflow in USB in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2023-5849)

  - Incorrect security UI in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to     perform domain spoofing via a crafted domain name. (Chromium security severity: Medium) (CVE-2023-5850)

  - Inappropriate implementation in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote     attacker to obfuscate security UI via a crafted HTML page. (Chromium security severity: Medium)     (CVE-2023-5851)

  - Use after free in Printing in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who     convinced a user to engage in specific UI gestures to potentially exploit heap corruption via specific UI     gestures. (Chromium security severity: Medium) (CVE-2023-5852)

  - Incorrect security UI in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to     obfuscate security UI via a crafted HTML page. (Chromium security severity: Medium) (CVE-2023-5853)

  - Use after free in Profiles in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who     convinced a user to engage in specific UI gestures to potentially exploit heap corruption via specific UI     gestures. (Chromium security severity: Medium) (CVE-2023-5854)

  - Use after free in Reading Mode in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who     convinced a user to engage in specific UI gestures to potentially exploit heap corruption via specific UI     gestures. (Chromium security severity: Medium) (CVE-2023-5855)

  - Use after free in Side Panel in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who     convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted     HTML page. (Chromium security severity: Medium) (CVE-2023-5856)

  - Inappropriate implementation in WebApp Provider in Google Chrome prior to 119.0.6045.105 allowed a remote     attacker to obfuscate security UI via a crafted HTML page. (Chromium security severity: Low)     (CVE-2023-5858)

  - Incorrect security UI in Picture In Picture in Google Chrome prior to 119.0.6045.105 allowed a remote     attacker to perform domain spoofing via a crafted local HTML page. (Chromium security severity: Low)     (CVE-2023-5859)

  - Inappropriate implementation in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote     attacker to potentially execute arbitrary code via a malicious file. (Chromium security severity: Medium)     (CVE-2023-5857)

  - Use after free in WebAudio in Google Chrome prior to 119.0.6045.123 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)     (CVE-2023-5996)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-f29e9560a1 advisory.

  - Inappropriate implementation in Payments in Google Chrome prior to 119.0.6045.105 allowed a remote     attacker to bypass XSS preventions via a malicious file. (Chromium security severity: High)     (CVE-2023-5480)

  - Insufficient data validation in USB in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to     perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)     (CVE-2023-5482)

  - Integer overflow in USB in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2023-5849)

  - Incorrect security UI in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to     perform domain spoofing via a crafted domain name. (Chromium security severity: Medium) (CVE-2023-5850)

  - Inappropriate implementation in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote     attacker to obfuscate security UI via a crafted HTML page. (Chromium security severity: Medium)     (CVE-2023-5851)

  - Use after free in Printing in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who     convinced a user to engage in specific UI gestures to potentially exploit heap corruption via specific UI     gestures. (Chromium security severity: Medium) (CVE-2023-5852)

  - Incorrect security UI in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to     obfuscate security UI via a crafted HTML page. (Chromium security severity: Medium) (CVE-2023-5853)

  - Use after free in Profiles in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who     convinced a user to engage in specific UI gestures to potentially exploit heap corruption via specific UI     gestures. (Chromium security severity: Medium) (CVE-2023-5854)

  - Use after free in Reading Mode in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who     convinced a user to engage in specific UI gestures to potentially exploit heap corruption via specific UI     gestures. (Chromium security severity: Medium) (CVE-2023-5855)

  - Use after free in Side Panel in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who     convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted     HTML page. (Chromium security severity: Medium) (CVE-2023-5856)

  - Inappropriate implementation in WebApp Provider in Google Chrome prior to 119.0.6045.105 allowed a remote     attacker to obfuscate security UI via a crafted HTML page. (Chromium security severity: Low)     (CVE-2023-5858)

  - Incorrect security UI in Picture In Picture in Google Chrome prior to 119.0.6045.105 allowed a remote     attacker to perform domain spoofing via a crafted local HTML page. (Chromium security severity: Low)     (CVE-2023-5859)

  - Inappropriate implementation in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote     attacker to potentially execute arbitrary code via a malicious file. (Chromium security severity: Medium)     (CVE-2023-5857)

  - Use after free in WebAudio in Google Chrome prior to 119.0.6045.123 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)     (CVE-2023-5996)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Microsoft Edge installed on the remote Windows host is prior to 118.0.2088.102 / 119.0.2151.58. It is, therefore, affected by multiple vulnerabilities as referenced in the November 9, 2023 advisory.

  - Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability (CVE-2023-36014)

  - Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability (CVE-2023-36024, CVE-2023-36027)

  - Use after free in WebAudio in Google Chrome prior to 119.0.6045.123 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)     (CVE-2023-5996)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 / 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5551 advisory.

  - Use after free in WebAudio in Google Chrome prior to 119.0.6045.123 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)     (CVE-2023-5996)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 77fc311d-7e62-11ee-8290-a8a1599412c6 advisory.

  - Use after free in WebAudio. (CVE-2023-5996)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Google Chrome installed on the remote macOS host is prior to 119.0.6045.123. It is, therefore, affected by a vulnerability as referenced in the 2023_11_stable-channel-update-for-desktop advisory.

  - Use after free in WebAudio in Google Chrome prior to 119.0.6045.123 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)     (CVE-2023-5996)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Google Chrome installed on the remote Windows host is prior to 119.0.6045.123. It is, therefore, affected by a vulnerability as referenced in the 2023_11_stable-channel-update-for-desktop advisory.

  - Use after free in WebAudio in Google Chrome prior to 119.0.6045.123 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)     (CVE-2023-5996)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
189844	GLSA-202401-34 : Chromium, Google Chrome, Microsoft Edge: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	critical
187218	GLSA-202312-07 : QtWebEngine: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	high
186268	GLSA-202311-11 : QtWebEngine: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	high
185895	FreeBSD : electron{25,26} -- use after free in WebAudio (a30f1a12-117f-4dac-a1d0-d65eaf084953)	Nessus	FreeBSD Local Security Checks	high
185711	openSUSE 15 Security Update : chromium (openSUSE-SU-2023:0368-1)	Nessus	SuSE Local Security Checks	high
185506	Fedora 39 : chromium (2023-f83b5e84d3)	Nessus	Fedora Local Security Checks	high
185505	Fedora 38 : chromium (2023-f29e9560a1)	Nessus	Fedora Local Security Checks	high
185436	Microsoft Edge (Chromium) < 118.0.2088.102 / 119.0.2151.58 Multiple Vulnerabilities	Nessus	Windows	high
185420	Debian DSA-5551-1 : chromium - security update	Nessus	Debian Local Security Checks	high
185373	FreeBSD : chromium -- security update (77fc311d-7e62-11ee-8290-a8a1599412c6)	Nessus	FreeBSD Local Security Checks	high
185350	Google Chrome < 119.0.6045.123 Vulnerability	Nessus	MacOS X Local Security Checks	high
185349	Google Chrome < 119.0.6045.123 Vulnerability	Nessus	Windows	high

Detections

Analytics

CVE-2023-5996

high

Tenable Plugins

critical

high

high

high

high

high

high

high

high

high

high

high