The version of Firefox installed on the remote Windows host is prior to 3.5.4. It is, therefore, affected by a vulnerability as referenced in the mfsa2009-55 advisory.

  - Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, allows remote attackers to     execute arbitrary code via a crafted regular expression in a Proxy Auto-configuration (PAC) file.
    (CVE-2009-3372)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Firefox installed on the remote Windows host is prior to 1.5.0.7. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2006-57 advisory.

  - https://bugzilla.mozilla.org/showbug.cgi?id=346794CVE-2006-4566 (CVE-2006-4566)

  - https://bugzilla.mozilla.org/showbug.cgi?id=346090CVE-2006-4565 (CVE-2006-4565)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Firefox installed on the remote Windows host is prior to 3.0.16. It is, therefore, affected by a vulnerability as referenced in the mfsa2009-68 advisory.

  - Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers     to send authenticated requests to arbitrary applications by replaying the NTLM credentials of a browser     user. (CVE-2009-3983)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Thunderbird installed on the remote Windows host is prior to 17.0.5. It is, therefore, affected by a vulnerability as referenced in the mfsa2013-40 advisory.

  - CERTDecodeCertPackage reads bytes outside the input buffer(CVE-2013-0791) (CVE-2013-0791)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Firefox installed on the remote Windows host is prior to 3.6.9. It is, therefore, affected by a vulnerability as referenced in the mfsa2010-63 advisory.

  - Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and     SeaMonkey before 2.0.7 do not properly restrict read access to the statusText property of XMLHttpRequest     objects, which allows remote attackers to discover the existence of intranet web servers via cross-origin     requests. (CVE-2010-2764)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Firefox installed on the remote Windows host is prior to 19.0. It is, therefore, affected by a vulnerability as referenced in the mfsa2013-22 advisory.

  - out-of-bounds-read in mozilla::image::RasterImage::DrawFrameTo(CVE-2013-0772) (CVE-2013-0772)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Firefox installed on the remote Windows host is prior to 7.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2011-41 advisory.

  - Mozilla Firefox before 7.0 and SeaMonkey before 2.4 allow remote attackers to cause a denial of service     (application crash) or possibly execute arbitrary code via an unspecified WebGL test case that triggers a     memory-allocation error and a resulting out-of-bounds write operation. (CVE-2011-3003)

  - Almost Native Graphics Layer Engine (ANGLE), as used in Mozilla Firefox before 7.0 and SeaMonkey before     2.4, does not validate the return value of a GrowAtomTable function call, which allows remote attackers to     cause a denial of service (application crash) or possibly execute arbitrary code via vectors that trigger     a memory-allocation error and a resulting buffer overflow. (CVE-2011-3002)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Firefox installed on the remote Windows host is prior to 22.0. It is, therefore, affected by a vulnerability as referenced in the mfsa2013-54 advisory.

  - Do not send data XHR HEAD request(CVE-2013-1692) (CVE-2013-1692)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Firefox installed on the remote Windows host is prior to 21.0. It is, therefore, affected by a vulnerability as referenced in the mfsa2013-42 advisory.

  - Call content level constructor as if from a chrome/privileged page(CVE-2013-1670) (CVE-2013-1670)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Firefox installed on the remote Windows host is prior to 3.0.5. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2008-68 advisory.

  - Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19,     Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allow remote attackers to run arbitrary     JavaScript with chrome privileges via unknown vectors in which page content can pollute     XPCNativeWrappers. (CVE-2008-5512)

  - Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey     1.x before 1.1.14 allows remote attackers to bypass the same origin policy and conduct cross-site     scripting (XSS) attacks via an XBL binding to an unloaded document. (CVE-2008-5511)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Firefox installed on the remote Windows host is prior to 2.0.0.12. It is, therefore, affected by a vulnerability as referenced in the mfsa2008-10 advisory.

  - Gecko-based browsers, including Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8, modify the     .href property of stylesheet DOM nodes to the final URI of a 302 redirect, which might allow remote     attackers to bypass the Same Origin Policy and read sensitive information from the original URL, such as     with Single-Signon systems. (CVE-2008-0593)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Firefox installed on the remote Windows host is prior to 146.0.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-98 advisory.

  - Memory safety bugs present in Firefox 146. Some of these bugs showed evidence of memory corruption and we     presume that with enough effort some of these could have been exploited to run arbitrary code.
    (CVE-2025-14861)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Thunderbird installed on the remote Windows host is prior to 2.0.0.19. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2008-68 advisory.

  - Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19,     Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allow remote attackers to run arbitrary     JavaScript with chrome privileges via unknown vectors in which page content can pollute     XPCNativeWrappers. (CVE-2008-5512)

  - Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey     1.x before 1.1.14 allows remote attackers to bypass the same origin policy and conduct cross-site     scripting (XSS) attacks via an XBL binding to an unloaded document. (CVE-2008-5511)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Firefox installed on the remote Windows host is prior to 2.0.0.15. It is, therefore, affected by a vulnerability as referenced in the mfsa2008-24 advisory.

  - Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonkey before 1.1.10 allow     remote attackers to execute arbitrary code via an XUL document that includes a script from a chrome: URI     that points to a fastload file, related to this file's privilege level. (CVE-2008-2802)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Thunderbird ESR installed on the remote Windows host is prior to 17.0.7. It is, therefore, affected by a vulnerability as referenced in the mfsa2013-54 advisory.

  - Do not send data XHR HEAD request(CVE-2013-1692) (CVE-2013-1692)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Firefox installed on the remote Windows host is prior to 20.0. It is, therefore, affected by a vulnerability as referenced in the mfsa2013-40 advisory.

  - CERTDecodeCertPackage reads bytes outside the input buffer(CVE-2013-0791) (CVE-2013-0791)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Firefox ESR installed on the remote Windows host is prior to 17.0.6. It is, therefore, affected by a vulnerability as referenced in the mfsa2013-42 advisory.

  - Call content level constructor as if from a chrome/privileged page(CVE-2013-1670) (CVE-2013-1670)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Firefox installed on the remote Windows host is prior to 32.0. It is, therefore, affected by a vulnerability as referenced in the mfsa2014-69 advisory.

  - Apparent info leak caused by uninitialized memory with malformed GIFs(CVE-2014-1564) (CVE-2014-1564)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Firefox installed on the remote Windows host is prior to 3.0.18. It is, therefore, affected by a vulnerability as referenced in the mfsa2010-05 advisory.

  - Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly     support the application/octet-stream content type as a protection mechanism against execution of web     script in certain circumstances involving SVG and the EMBED element, which allows remote attackers to     bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via an embedded SVG document.
    (CVE-2010-0162)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Firefox installed on the remote Windows host is prior to 34.0. It is, therefore, affected by a vulnerability as referenced in the mfsa2014-90 advisory.

  - jemalloc poisoning plus Apple uninitialized variable usage triggers keylogging in /tmp/ on OSX     10.10(CVE-2014-1595) (CVE-2014-1595)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Firefox installed on the remote Windows host is prior to 3.5. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2009-34 advisory.

  - The JavaScript engine in Mozilla Firefox before 3.0.12 and Thunderbird allows remote attackers to cause a     denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors     related to (1) nsDOMClassInfo.cpp, (2) JS_HashTableRawLookup, and (3) MirrorWrappedNativeParent and     js_LockGCThingRT. (CVE-2009-2466)

  - Mozilla Firefox before 3.0.12 and Thunderbird allow remote attackers to cause a denial of service (memory     corruption and application crash) or execute arbitrary code via vectors involving double frame     construction, related to (1) nsHTMLContentSink.cpp, (2) nsXMLContentSink.cpp, and (3) nsPresShell.cpp, and     the nsSubDocumentFrame::Reflow function. (CVE-2009-2465)

  - The browser engine in Mozilla Firefox before 3.0.12 and Thunderbird allows remote attackers to cause a     denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors     related to (1) the frame chain and synchronous events, (2) a SetMayHaveFrame assertion and     nsCSSFrameConstructor::CreateFloatingLetterFrame, (3) nsCSSFrameConstructor::ConstructFrame, (4) the child     list and initial reflow, (5) GetLastSpecialSibling, (6) nsFrameManager::GetPrimaryFrameFor and MathML, (7)     nsFrame::GetBoxAscent, (8) nsCSSFrameConstructor::AdjustParentFrame, (9) nsDOMOfflineResourceList, and     (10) nsContentUtils::ComparePosition. (CVE-2009-2462)

  - Multiple integer overflows in the (1) PL_Base64Decode and (2) PL_Base64Encode functions in     nsprpub/lib/libc/src/base64.c in Mozilla Firefox before 3.0.12, Thunderbird before 2.0.0.24, and SeaMonkey     before 1.1.19 allow remote attackers to cause a denial of service (memory corruption and application     crash) or possibly execute arbitrary code via unspecified vectors that trigger buffer overflows.
    (CVE-2009-2463)

  - The nsXULTemplateQueryProcessorRDF::CheckIsSeparator function in Mozilla Firefox before 3.0.12, SeaMonkey     2.0a1pre, and Thunderbird allows remote attackers to cause a denial of service (memory corruption and     application crash) or possibly execute arbitrary code via vectors related to loading multiple RDF files in     a XUL tree element. (CVE-2009-2464)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Thunderbird installed on the remote Windows host is prior to 1.5. It is, therefore, affected by a vulnerability as referenced in the mfsa2006-18 advisory.

  - https://bugzilla.mozilla.org/showbug.cgi?id=269095CVE-2006-0749 (CVE-2006-0749)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Firefox installed on the remote Windows host is prior to 3.5.12. It is, therefore, affected by a vulnerability as referenced in the mfsa2010-63 advisory.

  - Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and     SeaMonkey before 2.0.7 do not properly restrict read access to the statusText property of XMLHttpRequest     objects, which allows remote attackers to discover the existence of intranet web servers via cross-origin     requests. (CVE-2010-2764)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Firefox installed on the remote Windows host is prior to 3.0.15. It is, therefore, affected by a vulnerability as referenced in the mfsa2009-55 advisory.

  - Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, allows remote attackers to     execute arbitrary code via a crafted regular expression in a Proxy Auto-configuration (PAC) file.
    (CVE-2009-3372)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Firefox installed on the remote Windows host is prior to 8.0. It is, therefore, affected by a vulnerability as referenced in the mfsa2011-51 advisory.

  - Mozilla Firefox before 8.0 and Thunderbird before 8.0 on Mac OS X do not properly interact with the GPU     memory behavior of a certain driver for Intel integrated GPUs, which allows remote attackers to bypass the     Same Origin Policy and read image data via vectors related to WebGL textures. (CVE-2011-3653)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Firefox installed on the remote Windows host is prior to 16.0. It is, therefore, affected by a vulnerability as referenced in the mfsa2012-75 advisory.

  - Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 do not properly handle     navigation away from a web page that has a SELECT element's menu active, which allows remote attackers to     spoof page content via vectors involving absolute positioning and scrolling. (CVE-2012-3984)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Firefox installed on the remote Windows host is prior to 40.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2015-83 advisory.

  - crash in [@ stagefright::SampleTable::isValid() ] with h264 mp4(CVE-2015-4480) (CVE-2015-4480)

  - MPEG4 saio Chunk Integer Overflow (libstagefright)(CVE-2015-4479) (CVE-2015-4479)

  - Stagefright: heap-buffer-overflow crash [@stagefright::ESDS::parseESDescriptor](CVE-2015-4493)     (CVE-2015-4493)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Thunderbird ESR installed on the remote Windows host is prior to 17.0.5. It is, therefore, affected by a vulnerability as referenced in the mfsa2013-40 advisory.

  - CERTDecodeCertPackage reads bytes outside the input buffer(CVE-2013-0791) (CVE-2013-0791)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Firefox ESR installed on the remote Windows host is prior to 17.0.7. It is, therefore, affected by a vulnerability as referenced in the mfsa2013-54 advisory.

  - Do not send data XHR HEAD request(CVE-2013-1692) (CVE-2013-1692)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Firefox installed on the remote Windows host is prior to 1.5. It is, therefore, affected by a vulnerability as referenced in the mfsa2006-18 advisory.

  - https://bugzilla.mozilla.org/showbug.cgi?id=269095CVE-2006-0749 (CVE-2006-0749)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Thunderbird installed on the remote Windows host is prior to 1.5.0.7. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2006-57 advisory.

  - https://bugzilla.mozilla.org/showbug.cgi?id=346794CVE-2006-4566 (CVE-2006-4566)

  - https://bugzilla.mozilla.org/showbug.cgi?id=346090CVE-2006-4565 (CVE-2006-4565)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Firefox installed on the remote Windows host is prior to 3.5.8. It is, therefore, affected by a vulnerability as referenced in the mfsa2010-05 advisory.

  - Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly     support the application/octet-stream content type as a protection mechanism against execution of web     script in certain circumstances involving SVG and the EMBED element, which allows remote attackers to     bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via an embedded SVG document.
    (CVE-2010-0162)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Thunderbird installed on the remote Windows host is prior to 16.0. It is, therefore, affected by a vulnerability as referenced in the mfsa2012-75 advisory.

  - Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 do not properly handle     navigation away from a web page that has a SELECT element's menu active, which allows remote attackers to     spoof page content via vectors involving absolute positioning and scrolling. (CVE-2012-3984)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Firefox installed on the remote Windows host is prior to 48.0. It is, therefore, affected by a vulnerability as referenced in the mfsa2016-83 advisory.

  - bypass FireFox Secure Connection Failed prompt to whitelist any site (but doesn't work)(CVE-2016-5268)     (CVE-2016-5268)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Firefox installed on the remote Windows host is prior to 1.5.0.4. It is, therefore, affected by a vulnerability as referenced in the mfsa2006-31 advisory.

  - EvalInSandbox in Mozilla Firefox and Thunderbird before 1.5.0.4 allows remote attackers to gain privileges     via javascript that calls the valueOf method on objects that were created outside of the sandbox.
    (CVE-2006-2787)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Thunderbird installed on the remote Windows host is prior to 3.1.3. It is, therefore, affected by a vulnerability as referenced in the mfsa2010-63 advisory.

  - Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and     SeaMonkey before 2.0.7 do not properly restrict read access to the statusText property of XMLHttpRequest     objects, which allows remote attackers to discover the existence of intranet web servers via cross-origin     requests. (CVE-2010-2764)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Thunderbird installed on the remote Windows host is prior to 2.0.0.16. It is, therefore, affected by a vulnerability as referenced in the mfsa2008-24 advisory.

  - Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonkey before 1.1.10 allow     remote attackers to execute arbitrary code via an XUL document that includes a script from a chrome: URI     that points to a fastload file, related to this file's privilege level. (CVE-2008-2802)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Thunderbird installed on the remote Windows host is prior to 17.0.7. It is, therefore, affected by a vulnerability as referenced in the mfsa2013-54 advisory.

  - Do not send data XHR HEAD request(CVE-2013-1692) (CVE-2013-1692)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Windows host has the Dell Wireless 5932e and Qualcomm Snapdragon X62 Driver Package installed.

The version of Google Chrome installed on the remote Windows host is prior to 143.0.7499.146. It is, therefore, affected by multiple vulnerabilities as referenced in the 2025_12_stable-channel-update-for-desktop_16 advisory.

  - Out of bounds read and write in V8 in Google Chrome prior to 143.0.7499.147 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)     (CVE-2025-14766)

  - Use after free in WebGPU in Google Chrome prior to 143.0.7499.147 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2025-14765)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Zoom Rooms installed on the remote host is prior to 6.6.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-25050 advisory.

  - Software downgrade protection failure allows unauthenticated privilege escalation via local     access.(CVE-2025-67460);

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Zoom Rooms, video conferencing software, is installed on the remote Windows host.

Zoom Rooms is a software-based room system that provides an integrated experience for audio conferencing, wireless screen sharing, and video conferencing. Zoom Rooms runs on macOS and Windows computers connected to one or more screens in conference rooms, huddle rooms, and training rooms.

The version of Microsoft Edge installed on the remote Windows host is prior to 143.0.3650.80. It is, therefore, affected by multiple vulnerabilities as referenced in the December 11, 2025 advisory.

  - Use after free in Password Manager in Google Chrome prior to 143.0.7499.110 allowed a remote attacker to     potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)     (CVE-2025-14372)

  - Inappropriate implementation in Toolbar in Google Chrome on Android prior to 143.0.7499.110 allowed a     remote attacker to perform domain spoofing via a crafted HTML page. (Chromium security severity: Medium)     (CVE-2025-14373)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

JetBrains IntelliJ IDEA, an Integraded Development Environment (IDE) for professional development in Java and Kotlin, is installed on the remote Windows host.

One or more plugins for JetBrains IntelliJ IDEA, an integrated development environment software application, are installed on the remote Windows host.

The Microsoft Outlook application installed on the remote host is missing a security update. It is, therefore, affected by the following vulnerability:

  - A remote code execution vulnerability. An attacker can     exploit this to bypass authentication and execute     unauthorized arbitrary commands. (CVE-2025-62562)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Microsoft Access Products are missing a security update. It is, therefore, affected by the following vulnerability:

  - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute     unauthorized arbitrary commands. (CVE-2025-62552)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Microsoft Office Products are missing security updates. It is, therefore, affected by multiple vulnerabilities:

  - Remote code execution vulnerabilities that attackers can exploit to bypass authentication and execute     unauthorized arbitrary commands. (CVE-2025-62554, CVE-2025-62557)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Microsoft Word Products are missing security updates. It is, therefore, affected by multiple remote code execution vulnerabilities that attackers can exploit to bypass authentication and execute unauthorized arbitrary commands.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Microsoft Excel Products are missing a security update. It is, therefore, affected by the following vulnerabilities:

  - Multiple remote code execution vulnerabilities that attackers can exploit to bypass authentication and     execute unauthorized arbitrary commands. (CVE-2025-62553, CVE-2025-62556, CVE-2025-62558, CVE-2025-62559,     CVE-2025-62560, CVE-2025-62561, CVE-2025-62563, CVE-2025-62564)     Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Severity
279217	Mozilla Firefox < 3.5.4	critical
279216	Mozilla Firefox < 1.5.0.7	high
279211	Mozilla Firefox < 3.0.16	critical
279207	Mozilla Thunderbird < 17.0.5	high
279200	Mozilla Firefox < 3.6.9	high
279199	Mozilla Firefox < 19.0	high
279195	Mozilla Firefox < 7.0	critical
279193	Mozilla Firefox < 22.0	high
279192	Mozilla Firefox < 21.0	medium
279190	Mozilla Firefox < 3.0.5	medium
279187	Mozilla Firefox < 2.0.0.12	high
279186	Mozilla Firefox < 146.0.1	critical
279184	Mozilla Thunderbird < 2.0.0.19	medium
279183	Mozilla Firefox < 2.0.0.15	critical
279182	Mozilla Thunderbird ESR < 17.0.7	high
279181	Mozilla Firefox < 20.0	high
279178	Mozilla Firefox ESR < 17.0.6	medium
279175	Mozilla Firefox < 32.0	medium
279173	Mozilla Firefox < 3.0.18	medium
279170	Mozilla Firefox < 34.0	medium
279167	Mozilla Firefox < 3.5	high
279166	Mozilla Thunderbird < 1.5	high
279165	Mozilla Firefox < 3.5.12	high
279163	Mozilla Firefox < 3.0.15	critical
279162	Mozilla Firefox < 8.0	high
279161	Mozilla Firefox < 16.0	medium
279159	Mozilla Firefox < 40.0	high
279156	Mozilla Thunderbird ESR < 17.0.5	high
279153	Mozilla Firefox ESR < 17.0.7	high
279152	Mozilla Firefox < 1.5	high
279151	Mozilla Thunderbird < 1.5.0.7	high
279150	Mozilla Firefox < 3.5.8	medium
279146	Mozilla Thunderbird < 16.0	medium
279143	Mozilla Firefox < 48.0	medium
279142	Mozilla Firefox < 1.5.0.4	critical
279139	Mozilla Thunderbird < 3.1.3	high
279135	Mozilla Thunderbird < 2.0.0.16	critical
279131	Mozilla Thunderbird < 17.0.7	high
278945	Dell Wireless 5932e and Qualcomm Snapdragon X62 Driver Package Installed	info
278781	Google Chrome < 143.0.7499.146 Multiple Vulnerabilities	high
278529	Zoom Rooms< 6.6.0 Vulnerability (ZSB-25050)	high
278527	Zoom Rooms Installed (Windows)	info
278386	Microsoft Edge (Chromium) < 143.0.3650.80 Multiple Vulnerabilities	medium
278338	JetBrains IntelliJ IDEA Installed (Windows)	info
278336	JetBrains IntelliJ IDEA Plugins Installed (Windows)	info
278335	Security Updates for Outlook (December 2025)	high
278334	Security Updates for Microsoft Access Products C2R (December 2025)	high
278333	Security Updates for Microsoft Office Products C2R (December 2025)	high
278332	Security Updates for Microsoft Word Products C2R (December 2025)	high
278331	Security Updates for Microsoft Excel Products C2R (December 2025)	high

Detections

Analytics

Windows Family for Nessus

critical

high

critical

high

high

high

critical

high

medium

medium

high

critical

medium

critical

high

high

medium

medium

medium

medium

high

high

high

critical

high

medium

high

high

high

high

high

medium

medium

medium

critical

high

critical

high

info

high

high

info

medium

info

info

high

high

high

high

high