The version of Google Chrome installed on the remote macOS host is prior to 76.0.3809.100. It is, therefore, affected by multiple vulnerabilities as referenced in the 2019_08_stable-channel-update-for-desktop advisory.

  - Out of bounds read in JavaScript in Google Chrome prior to 76.0.3809.100 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2019-5867)

  - Use after free in PDFium in Google Chrome prior to 76.0.3809.100 allowed a remote attacker to potentially     exploit heap corruption via a crafted PDF file. (CVE-2019-5868)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Google Chrome installed on the remote Windows host is prior to 76.0.3809.100. It is, therefore, affected by multiple vulnerabilities as referenced in the 2019_08_stable-channel-update-for-desktop advisory.

  - Out of bounds read in JavaScript in Google Chrome prior to 76.0.3809.100 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2019-5867)

  - Use after free in PDFium in Google Chrome prior to 76.0.3809.100 allowed a remote attacker to potentially     exploit heap corruption via a crafted PDF file. (CVE-2019-5868)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Several vulnerabilities have been discovered in the chromium web browser.

  - CVE-2019-5805     A use-after-free issue was discovered in the pdfium     library.

  - CVE-2019-5806     Wen Xu discovered an integer overflow issue in the Angle     library.

  - CVE-2019-5807     TimGMichaud discovered a memory corruption issue in the     v8 JavaScript library.

  - CVE-2019-5808     cloudfuzzer discovered a use-after-free issue in     Blink/Webkit.

  - CVE-2019-5809     Mark Brand discovered a use-after-free issue in     Blink/Webkit.

  - CVE-2019-5810     Mark Amery discovered an information disclosure issue.

  - CVE-2019-5811     Jun Kokatsu discovered a way to bypass the Cross-Origin     Resource Sharing feature.

  - CVE-2019-5813     Aleksandar Nikolic discovered an out-of-bounds read     issue in the v8 JavaScript library.

  - CVE-2019-5814     @AaylaSecura1138 discovered a way to bypass the     Cross-Origin Resource Sharing feature.

  - CVE-2019-5815     Nicolas Gregoire discovered a buffer overflow issue in     Blink/Webkit.

  - CVE-2019-5818     Adrian Tolbaru discovered an uninitialized value issue.

  - CVE-2019-5819     Svyat Mitin discovered an error in the developer tools.

  - CVE-2019-5820     pdknsk discovered an integer overflow issue in the     pdfium library.

  - CVE-2019-5821     pdknsk discovered another integer overflow issue in the     pdfium library.

  - CVE-2019-5822     Jun Kokatsu discovered a way to bypass the Cross-Origin     Resource Sharing feature.

  - CVE-2019-5823     David Erceg discovered a navigation error.

  - CVE-2019-5824     leecraso and Guang Gong discovered an error in the media     player.

  - CVE-2019-5825     Genming Liu, Jianyu Chen, Zhen Feng, and Jessica Liu     discovered an out-of-bounds write issue in the v8     JavaScript library.

  - CVE-2019-5826     Genming Liu, Jianyu Chen, Zhen Feng, and Jessica Liu     discovered a use-after-free issue.

  - CVE-2019-5827     mlfbrown discovered an out-of-bounds read issue in the     sqlite library.

  - CVE-2019-5828     leecraso and Guang Gong discovered a use-after-free     issue.

  - CVE-2019-5829     Lucas Pinheiro discovered a use-after-free issue.

  - CVE-2019-5830     Andrew Krashichkov discovered a credential error in the     Cross-Origin Resource Sharing feature.

  - CVE-2019-5831     yngwei discovered a map error in the v8 JavaScript     library.

  - CVE-2019-5832     Sergey Shekyan discovered an error in the Cross-Origin     Resource Sharing feature.

  - CVE-2019-5833     Khalil Zhani discovered a user interface error.

  - CVE-2019-5834     Khalil Zhani discovered a URL spoofing issue.

  - CVE-2019-5836     Omair discovered a buffer overflow issue in the Angle     library.

  - CVE-2019-5837     Adam Iawniuk discovered an information disclosure issue.

  - CVE-2019-5838     David Erceg discovered an error in extension     permissions.

  - CVE-2019-5839     Masato Kinugawa discovered implementation errors in     Blink/Webkit.

  - CVE-2019-5840     Eliya Stein and Jerome Dangu discovered a way to bypass     the popup blocker.

  - CVE-2019-5842     BUGFENSE discovered a use-after-free issue in     Blink/Webkit.

  - CVE-2019-5847     m3plex discovered an error in the v8 JavaScript library.

  - CVE-2019-5848     Mark Amery discovered an information disclosure issue.

  - CVE-2019-5849     Zhen Zhou discovered an out-of-bounds read in the Skia     library.

  - CVE-2019-5850     Brendon Tiszka discovered a use-after-free issue in the     offline page fetcher.

  - CVE-2019-5851     Zhe Jin discovered a use-after-poison issue.

  - CVE-2019-5852     David Erceg discovered an information disclosure issue.

  - CVE-2019-5853     Yngwei and sakura discovered a memory corruption issue.

  - CVE-2019-5854     Zhen Zhou discovered an integer overflow issue in the     pdfium library.

  - CVE-2019-5855     Zhen Zhou discovered an integer overflow issue in the     pdfium library.

  - CVE-2019-5856     Yongke Wang discovered an error related to filesystem:
    URI permissions.

  - CVE-2019-5857     cloudfuzzer discovered a way to crash chromium.

  - CVE-2019-5858     evil1m0 discovered an information disclosure issue.

  - CVE-2019-5859     James Lee discovered a way to launch alternative     browsers.

  - CVE-2019-5860     A use-after-free issue was discovered in the v8     JavaScript library.

  - CVE-2019-5861     Robin Linus discovered an error determining click     location.

  - CVE-2019-5862     Jun Kokatsu discovered an error in the AppCache     implementation.

  - CVE-2019-5864     Devin Grindle discovered an error in the Cross-Origin     Resourse Sharing feature for extensions.

  - CVE-2019-5865     Ivan Fratric discovered a way to bypass the site     isolation feature.

  - CVE-2019-5867     Lucas Pinheiro discovered an out-of-bounds read issue in     the v8 JavaScript library.

  - CVE-2019-5868     banananapenguin discovered a use-after-free issue in the     v8 JavaScript library.

This update for chromium to verion 76.0.3809.100 fixes the following issues :

  - CVE-2019-5868: Use-after-free in PDFium     ExecuteFieldAction (boo#1145242)

  - CVE-2019-5867: Out-of-bounds read in V8 (boo#1145242).

The remote host is affected by the vulnerability described in GLSA-201908-18 (Chromium, Google Chrome: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Chromium and Google       Chrome. Please review the referenced CVE identifiers and Google Chrome       Releases for details.
  Impact :

    Please review the referenced CVE identifiers for details.
  Workaround :

    There is no known workaround at this time.

ID	Name	Product	Family	Published	Updated	Severity
127128	Google Chrome < 76.0.3809.100 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	8/8/2019	11/24/2025	medium
127129	Google Chrome < 76.0.3809.100 Multiple Vulnerabilities	Nessus	Windows	8/8/2019	11/24/2025	medium
127868	Debian DSA-4500-1 : chromium - security update	Nessus	Debian Local Security Checks	8/14/2019	5/3/2024	critical
127995	openSUSE Security Update : chromium (openSUSE-2019-1903)	Nessus	SuSE Local Security Checks	8/20/2019	5/2/2024	medium
127967	GLSA-201908-18 : Chromium, Google Chrome: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	8/20/2019	5/2/2024	critical
127994	openSUSE Security Update : chromium (openSUSE-2019-1902)	Nessus	SuSE Local Security Checks	8/20/2019	5/2/2024	medium

Detections

Analytics

Plugins Search

medium

medium

critical

medium

critical

medium