The version of Google Chrome installed on the remote macOS host is prior to 68.0.3440.75. It is, therefore, affected by multiple vulnerabilities as referenced in the 2018_07_stable-channel-update-for-desktop advisory.

  - The implementation of the Page.downloadBehavior backend unconditionally marked downloaded files as safe,     regardless of file type in Google Chrome prior to 66.0.3359.117 allowed an attacker who convinced a user     to install a malicious extension to potentially perform a sandbox escape via a crafted HTML page and user     interaction. (CVE-2018-6152)

  - Integer overflows in Swiftshader in Google Chrome prior to 68.0.3440.75 potentially allowed a remote     attacker to execute arbitrary code via a crafted HTML page. (CVE-2018-6174)

  - A precision error in Skia in Google Chrome prior to 68.0.3440.75 allowed a remote attacker who had     compromised the renderer process to perform an out of bounds memory write via a crafted HTML page.
    (CVE-2018-6153)

  - Insufficient data validation in WebGL in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2018-6154)

  - Incorrect handling of frames in the VP8 parser in Google Chrome prior to 68.0.3440.75 allowed a remote     attacker to potentially exploit heap corruption via a crafted video file. (CVE-2018-6155)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Google Chrome installed on the remote Windows host is prior to 68.0.3440.75. It is, therefore, affected by multiple vulnerabilities as referenced in the 2018_07_stable-channel-update-for-desktop advisory.

  - The implementation of the Page.downloadBehavior backend unconditionally marked downloaded files as safe,     regardless of file type in Google Chrome prior to 66.0.3359.117 allowed an attacker who convinced a user     to install a malicious extension to potentially perform a sandbox escape via a crafted HTML page and user     interaction. (CVE-2018-6152)

  - Integer overflows in Swiftshader in Google Chrome prior to 68.0.3440.75 potentially allowed a remote     attacker to execute arbitrary code via a crafted HTML page. (CVE-2018-6174)

  - A precision error in Skia in Google Chrome prior to 68.0.3440.75 allowed a remote attacker who had     compromised the renderer process to perform an out of bounds memory write via a crafted HTML page.
    (CVE-2018-6153)

  - Insufficient data validation in WebGL in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2018-6154)

  - Incorrect handling of frames in the VP8 parser in Google Chrome prior to 68.0.3440.75 allowed a remote     attacker to potentially exploit heap corruption via a crafted video file. (CVE-2018-6155)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
111382	Google Chrome < 68.0.3440.75 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	7/27/2018	11/24/2025	critical
111383	Google Chrome < 68.0.3440.75 Multiple Vulnerabilities	Nessus	Windows	7/27/2018	11/24/2025	critical

Detections

Analytics

Plugins Search

critical

critical