The version of Google Chrome installed on the remote macOS host is prior to 104.0.5112.101. It is, therefore, affected by multiple vulnerabilities as referenced in the 2022_08_stable-channel-update-for-desktop_16 advisory.

  - Use after free in Browser Creation in Google Chrome prior to 104.0.5112.101 allowed a remote attacker who     had convinced a user to engage in a specific UI interaction to potentially exploit heap corruption via a     crafted HTML page. (CVE-2022-2998)

  - Use after free in FedCM in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (CVE-2022-2852)

  - Use after free in SwiftShader in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2022-2854)

  - Use after free in ANGLE in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (CVE-2022-2855)

  - Use after free in Blink in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (CVE-2022-2857)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Google Chrome < 104.0.5112.101 Multiple Vulnerabilities

high Nessus Plugin ID 164154

Version 1.11