The version of Microsoft Edge installed on the remote Windows host is prior to 101.0.1210.32. It is, therefore, affected by multiple vulnerabilities as referenced in the April 28, 2022 advisory.

  - Use after free in Dev Tools in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to     potentially exploit heap corruption via specific and direct user interaction. (CVE-2022-1493)

  - Use after free in Vulkan in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (CVE-2022-1477)

  - Use after free in SwiftShader in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2022-1478)

  - Use after free in ANGLE in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (CVE-2022-1479)

  - Use after free in Sharing in Google Chrome on Mac prior to 101.0.4951.41 allowed a remote attacker who     convinced a user to engage in specific user interaction to potentially exploit heap corruption via a     crafted HTML page. (CVE-2022-1481)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
160319	Microsoft Edge (Chromium) < 101.0.1210.32 Multiple Vulnerabilities	Nessus	Windows	4/28/2022	3/23/2023	high
164112	GLSA-202208-25 : Chromium, Google Chrome, Microsoft Edge, QtWebEngine: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	8/15/2022	10/16/2023	critical

Detections

Analytics

Plugins Search

high

critical