The remote host is affected by the vulnerability described in GLSA-201911-06 (Chromium, Google Chrome: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Chromium and Google       Chrome. Please review the CVE identifiers referenced below for details.
  Impact :

    Please review the referenced CVE identifiers for details.
  Workaround :

    There is no known workaround at this time.

The version of Google Chrome installed on the remote macOS host is prior to 77.0.3865.75. It is, therefore, affected by multiple vulnerabilities as referenced in the 2019_09_stable-channel-update-for-desktop advisory.

  - Use after free in V8 in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (CVE-2019-5878)

  - Use after free in media in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially     perform a sandbox escape via a crafted HTML page. (CVE-2019-5870)

  - Use-after-free in accessibility in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2019-13766)

  - Heap buffer overflow in Skia in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2019-5871)

  - Use after free in Mojo in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (CVE-2019-5872)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Chromium update to 77.0.3865.120. For the upstream announcement see https://chromereleases.googleblog.com/2019/10/stable-channel-update-fo r-desktop.html.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of Google Chrome installed on the remote Windows host is prior to 77.0.3865.75. It is, therefore, affected by multiple vulnerabilities as referenced in the 2019_09_stable-channel-update-for-desktop advisory.

  - Use after free in V8 in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (CVE-2019-5878)

  - Use after free in media in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially     perform a sandbox escape via a crafted HTML page. (CVE-2019-5870)

  - Use-after-free in accessibility in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2019-13766)

  - Heap buffer overflow in Skia in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2019-5871)

  - Use after free in Mojo in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (CVE-2019-5872)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
131266	GLSA-201911-06 : Chromium, Google Chrome: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	11/25/2019	4/10/2024	critical
128740	Google Chrome < 77.0.3865.75 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	9/12/2019	11/24/2025	critical
130309	Fedora 31 : chromium (2019-9a5e81214f)	Nessus	Fedora Local Security Checks	10/28/2019	4/16/2024	critical
128741	Google Chrome < 77.0.3865.75 Multiple Vulnerabilities	Nessus	Windows	9/12/2019	11/24/2025	critical

Detections

Analytics

Plugins Search

critical

critical

critical

critical