The version of Google Chrome installed on the remote Windows host is prior to 123.0.6312.58. It is, therefore, affected by multiple vulnerabilities as referenced in the 2024_03_stable-channel-update-for-desktop_19 advisory.

  - Object lifecycle issue in V8 in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to     potentially exploit object corruption via a crafted HTML page. (Chromium security severity: High)     (CVE-2024-2625)

  - Out of bounds read in Swiftshader in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to     perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Medium)     (CVE-2024-2626)

  - Use after free in Canvas in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) (CVE-2024-2627)

  - Inappropriate implementation in Downloads in Google Chrome prior to 123.0.6312.58 allowed a remote     attacker to perform UI spoofing via a crafted URL. (Chromium security severity: Medium) (CVE-2024-2628)

  - Incorrect security UI in iOS in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to perform     UI spoofing via a crafted HTML page. (Chromium security severity: Medium) (CVE-2024-2629)

  - Inappropriate implementation in iOS in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to     leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium) (CVE-2024-2630)

  - Inappropriate implementation in iOS in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to     perform UI spoofing via a crafted HTML page. (Chromium security severity: Low) (CVE-2024-2631)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Google Chrome < 123.0.6312.58 Multiple Vulnerabilities

high Nessus Plugin ID 192252

Version 1.4

Version 1.3

Version 1.2

Version 1.2

Version 1.1

Version 1.0

Version 1.4 May 3, 2024, 10:26 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202405032226
Version 1.3 Apr 2, 2024, 2:43 PM CVSS metrics ("CVSSv3 score" set to 8.8. "CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H") Plugin Feed: 202404021443
Version 1.2 Mar 29, 2024, 11:43 AM IAVM reference Plugin Feed: 202403291143
Version 1.2 Apr 2, 2024, 12:34 PM CVSS metrics ("CVSSv3 score" set to 8.8) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H") Plugin Feed: 202404021234
Version 1.1 Mar 22, 2024, 12:02 PM IAVM reference STIG Severity (set to "I") Plugin Feed: 202403221202
Version 1.0 Mar 19, 2024, 9:53 PM New Plugin Feed: 202403192153