The version of Google Chrome installed on the remote macOS host is prior to 77.0.3865.75. It is, therefore, affected by multiple vulnerabilities as referenced in the 2019_09_stable-channel-update-for-desktop advisory.

  - Use after free in V8 in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (CVE-2019-5878)

  - Use after free in media in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially     perform a sandbox escape via a crafted HTML page. (CVE-2019-5870)

  - Use-after-free in accessibility in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2019-13766)

  - Heap buffer overflow in Skia in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2019-5871)

  - Use after free in Mojo in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (CVE-2019-5872)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Google Chrome installed on the remote Windows host is prior to 77.0.3865.75. It is, therefore, affected by multiple vulnerabilities as referenced in the 2019_09_stable-channel-update-for-desktop advisory.

  - Use after free in V8 in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (CVE-2019-5878)

  - Use after free in media in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially     perform a sandbox escape via a crafted HTML page. (CVE-2019-5870)

  - Use-after-free in accessibility in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2019-13766)

  - Heap buffer overflow in Skia in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2019-5871)

  - Use after free in Mojo in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (CVE-2019-5872)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
128740	Google Chrome < 77.0.3865.75 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	9/12/2019	11/24/2025	critical
128741	Google Chrome < 77.0.3865.75 Multiple Vulnerabilities	Nessus	Windows	9/12/2019	11/24/2025	critical

Detections

Analytics

Plugins Search

critical

critical