Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allowed a remote attacker to perform a sandbox escape via a malicious file. (Chromium security severity: High)

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions. This
    issue is fixed in Safari 18.3.1, iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iOS 18.3.2
    and iPadOS 18.3.2, iPadOS 17.7.6, macOS Sequoia 15.3.2, visionOS 2.3.2, watchOS 11.4. Maliciously crafted
    web content may be able to break out of Web Content sandbox. This is a supplementary fix for an attack
    that was blocked in iOS 17.2. (Apple is aware of a report that this issue may have been exploited in an
    extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 17.2.).
    (CVE-2025-24201)

  - 7-Zip Zstandard Decompression Integer Underflow Remote Code Execution Vulnerability. This vulnerability
    allows remote attackers to execute arbitrary code on affected installations of 7-Zip. Interaction with
    this library is required to exploit this vulnerability but attack vectors may vary depending on the
    implementation. The specific flaw exists within the implementation of Zstandard decompression. The issue
    results from the lack of proper validation of user-supplied data, which can result in an integer underflow
    before writing to memory. An attacker can leverage this vulnerability to execute code in the context of
    the current process. Was ZDI-CAN-24346. (CVE-2024-11477)

  - Out of bounds memory access in V8 in Google Chrome prior to 131.0.6778.204 allowed a remote attacker to
    execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
    (CVE-2024-12693)

  - Use after free in Compositing in Google Chrome prior to 131.0.6778.204 allowed a remote attacker to
    potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
    (CVE-2024-12694)

  - xsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue related to exclusion of result
    prefixes. (CVE-2024-55549)

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions. This
    issue is fixed in Safari 18.3.1, iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iOS 18.3.2
    and iPadOS 18.3.2, iPadOS 17.7.6, macOS Sequoia 15.3.2, visionOS 2.3.2, watchOS 11.4. Maliciously crafted
    web content may be able to break out of Web Content sandbox. This is a supplementary fix for an attack
    that was blocked in iOS 17.2. (Apple is aware of a report that this issue may have been exploited in an
    extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 17.2.).
    (CVE-2025-24201)

  - 7-Zip Zstandard Decompression Integer Underflow Remote Code Execution Vulnerability. This vulnerability
    allows remote attackers to execute arbitrary code on affected installations of 7-Zip. Interaction with
    this library is required to exploit this vulnerability but attack vectors may vary depending on the
    implementation. The specific flaw exists within the implementation of Zstandard decompression. The issue
    results from the lack of proper validation of user-supplied data, which can result in an integer underflow
    before writing to memory. An attacker can leverage this vulnerability to execute code in the context of
    the current process. Was ZDI-CAN-24346. (CVE-2024-11477)

  - Use after free in Compositing in Google Chrome prior to 131.0.6778.204 allowed a remote attacker to
    potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
    (CVE-2024-12694)

  - xsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue related to exclusion of result
    prefixes. (CVE-2024-55549)

  - Integer overflow in Skia in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to potentially
    exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2025-0436)

The remote openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2025:0111-1 advisory.

    - Update to 117.0.5408.163
      * DNA-120683 [Issue back] Sometimes onboarding is blank         and useless
      * DNA-121682 Backport fix for CVE-2025-2783 to O132, O133,         GX132 and Air132
    - Changes in 117.0.5408.154
      * DNA-121210 After enabling tab scrolling, the tab bar narrows         on both the left and right sides
      * DNA-121560 Extension updates which requires manual         confirmation do not work
    - Changes in 117.0.5408.142
      * DNA-121314 Use the extra palette color to paint the frame
      * DNA-121321 Refactor ColorSet struct
      * DNA-121444 Crash at opera::VibesServiceImpl::VibesServiceImpl
      * DNA-121477 Add unit tests for ColorSet
      * DNA-121488 [ASAN] ColorSetTest.DefaultConstructor fails
    - Changes in 117.0.5408.93
      * DNA-118548 After pressing Ctrl+F / Cmd+F on the Start Page         (SP), the focus should be on the search bar
      * DNA-121183 Add 'transparent UI' parameter to Vibe logic
      * DNA-121184 Allow to specify extra palette for window         background in Vibe logic
      * DNA-121232 Enable Slack, Discord and Bluesky flag on         all streams
      * DNA-121237 Crash at opera::SidebarExpandViewEmbedder::Position
      * DNA-121322 [Opera Translate] [Redesign] Expired #translator         flag
      * DNA-121385 Remove 'passkey' string

    - Update to 117.0.5408.53
      * DNA-120848 Add 'x' button to close/dismiss translate popup
      * DNA-120849 Dismissing popup adds language to never translate         from list
      * DNA-120951 Optimize MFSVE output handling
      * DNA-120972 Crash at TabDesktopMediaList::Refresh
      * CHR-9964 Update Chromium on desktop-stable-132-5408 to         132.0.6834.210     Changes in 117.0.5408.47
      * CHR-9961 Update Chromium on desktop-stable-132-5408 to         132.0.6834.209

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 01a7e1e1-d249-4dd8-9a4a-ef95b5747afb advisory.

    Electron developers report:
    This update fixes the following vulnerability:

Tenable has extracted the preceding description block directly from the FreeBSD security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Microsoft Edge installed on the remote Windows host is prior to 134.0.3124.93. It is, therefore, affected by a vulnerability as referenced in the March 26, 2025 advisory.

  - Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to     134.0.6998.177 allowed a remote attacker to perform a sandbox escape via a malicious file. (Chromium     security severity: High) (CVE-2025-2783)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Google Chrome installed on the remote Windows host is prior to 134.0.6998.177. It is, therefore, affected by a vulnerability as referenced in the 2025_03_stable-channel-update-for-desktop_25 advisory.

  - Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to     134.0.6998.177 allowed a remote attacker to perform a sandbox escape via a malicious file. (Chromium     security severity: High) (CVE-2025-2783)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
427796	Alpine: multiple qt6-qtwebengine packages: security update to 6.8.2-r3	Tenable Cloud Security	Alpine Linux Local Security Checks	critical
427796	Alpine: multiple qt6-qtwebengine packages: security update to 6.8.2-r3	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	critical
427793	Alpine: qt5-qtwebengine: security update to 5.15.17-r10	Tenable Cloud Security	Alpine Linux Local Security Checks	critical
427793	Alpine: qt5-qtwebengine: security update to 5.15.17-r10	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	critical
426560	Alpine: multiple qt5-qtwebengine packages: security update to 5.15.17-r7	Tenable Cloud Security	Alpine Linux Local Security Checks	critical
426560	Alpine: multiple qt5-qtwebengine packages: security update to 5.15.17-r7	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	critical
233751	openSUSE 15 Security Update : opera (openSUSE-SU-2025:0111-1)	Nessus	SuSE Local Security Checks	high
233500	FreeBSD : electron{33,34} -- Incorrect handle provided in unspecified circumstances in Mojo (01a7e1e1-d249-4dd8-9a4a-ef95b5747afb)	Nessus	FreeBSD Local Security Checks	high
233369	Microsoft Edge (Chromium) < 134.0.3124.93 (CVE-2025-2783)	Nessus	Windows	high
233331	Google Chrome < 134.0.6998.177 Vulnerability	Nessus	Windows	high

Detections

Analytics

CVE-2025-2783

high

Tenable Plugins

critical

critical

critical

critical

critical

critical

high

high

high

high