The version of Microsoft Edge installed on the remote Windows host is prior to 133.0.3065.51. It is, therefore, affected by multiple vulnerabilities as referenced in the February 6, 2025 advisory.

  - Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability (CVE-2025-21279, CVE-2025-21283,     CVE-2025-21342, CVE-2025-21408)

  - Use after free in Skia in Google Chrome prior to 133.0.6943.53 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2025-0444)

  - Use after free in V8 in Google Chrome prior to 133.0.6943.53 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2025-0445)

  - Inappropriate implementation in Extensions API in Google Chrome prior to 133.0.6943.53 allowed a remote     attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted     Chrome Extension. (Chromium security severity: Medium) (CVE-2025-0451)

  - Microsoft Edge (Chromium-based) Spoofing Vulnerability (CVE-2025-21267, CVE-2025-21404)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Microsoft Edge (Chromium) < 133.0.3065.51 Multiple Vulnerabilities

high Nessus Plugin ID 215070

Version 1.3

Version 1.2

Version 1.1

Version 1.3 Feb 21, 2025, 11:26 AM IAVM reference Plugin Feed: 202502211126
Version 1.2 Feb 14, 2025, 3:26 PM STIG Severity (set to "I") IAVM reference Plugin Feed: 202502141526
Version 1.1 Feb 7, 2025, 8:35 AM New Plugin Feed: 202502070835