A web browser installed on the remote Windows host is affected by a vulnerability.

The version of Google Chrome installed on the remote Windows host is prior to 141.0.7390.107. It is, therefore, affected by a vulnerability as referenced in the 2025_10_stable-channel-update-for-desktop_14 advisory.

- Use after free in Safe Browsing in Google Chrome prior to 141.0.7390.107 allowed a remote attacker who had compromised the renderer process to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High) (CVE-2025-11756)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Upgrade to Google Chrome version 141.0.7390.107 or later.

Critical

8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)

7.7 (CVSS:3.0/E:U/RL:O/RC:C)

0.0004

10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)

7.4 (CVSS2#E:U/RL:OF/RC:C)

I

Published: 2025/10/14, Modified: 2025/11/20

Path : C:\Program Files\Google\Chrome\Application
Installed version : 140.0.7339.208
Fixed version : 141.0.7390.107/.108

A web browser installed on the remote Windows host is affected by multiple vulnerabilities.

The version of Google Chrome installed on the remote Windows host is prior to 141.0.7390.54. It is, therefore, affected by multiple vulnerabilities as referenced in the 2025_09_stable-channel-update-for-desktop_30 advisory.

- Use after free in V8 in Google Chrome prior to 141.0.7390.54 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Low) (CVE-2025-11219)

- Heap buffer overflow in WebGPU in Google Chrome prior to 141.0.7390.54 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2025-11205)

- Heap buffer overflow in Video in Google Chrome prior to 141.0.7390.54 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High) (CVE-2025-11206)

- Side-channel information leakage in Storage in Google Chrome prior to 141.0.7390.54 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: Medium) (CVE-2025-11207)

- Inappropriate implementation in Media in Google Chrome prior to 141.0.7390.54 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page.
(Chromium security severity: Medium) (CVE-2025-11208)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Upgrade to Google Chrome version 141.0.7390.54 or later.

Critical

8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)

7.7 (CVSS:3.0/E:U/RL:O/RC:C)

0.0005

10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)

7.4 (CVSS2#E:U/RL:OF/RC:C)

I

Published: 2025/10/01, Modified: 2025/11/20

Path : C:\Program Files\Google\Chrome\Application
Installed version : 140.0.7339.208
Fixed version : 141.0.7390.54/55

A web browser installed on the remote Windows host is affected by multiple vulnerabilities.

The version of Google Chrome installed on the remote Windows host is prior to 141.0.7390.65. It is, therefore, affected by multiple vulnerabilities as referenced in the 2025_10_stable-channel-update-for-desktop advisory.

- Use after free in Storage in Google Chrome prior to 141.0.7390.65 allowed a remote attacker to execute arbitrary code via a crafted video file. (Chromium security severity: High) (CVE-2025-11460)

- Heap buffer overflow in Sync in Google Chrome prior to 141.0.7390.65 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: High) (CVE-2025-11458)

- Out of bounds read in Media in Google Chrome prior to 141.0.7390.54 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity:
Medium) (CVE-2025-11211)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Upgrade to Google Chrome version 141.0.7390.65 or later.

Critical

8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)

7.7 (CVSS:3.0/E:U/RL:O/RC:C)

0.0004

10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)

7.4 (CVSS2#E:U/RL:OF/RC:C)

I

Published: 2025/10/07, Modified: 2025/11/24

Path : C:\Program Files\Google\Chrome\Application
Installed version : 140.0.7339.208
Fixed version : 141.0.7390.65/.66

A web browser installed on the remote Windows host is affected by multiple vulnerabilities.

The version of Google Chrome installed on the remote Windows host is prior to 142.0.7444.59. It is, therefore, affected by multiple vulnerabilities as referenced in the 2025_10_stable-channel-update-for-desktop_28 advisory.

- Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2025-13226, CVE-2025-13227, CVE-2025-13228, CVE-2025-13229, CVE-2025-13230)

- Use after free in Ozone in Google Chrome on Linux and ChromeOS prior to 142.0.7444.59 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (Chromium security severity:
Medium) (CVE-2025-12438)

- Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High) (CVE-2025-12428)

- Inappropriate implementation in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High) (CVE-2025-12429)

- Object lifecycle issue in Media in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: High) (CVE-2025-12430)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Upgrade to Google Chrome version 142.0.7444.59 or later.

Critical

8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)

7.9 (CVSS:3.0/E:P/RL:O/RC:C)

0.0007

10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)

7.8 (CVSS2#E:POC/RL:OF/RC:C)

I

Published: 2025/10/29, Modified: 2025/11/24

Path : C:\Program Files\Google\Chrome\Application
Installed version : 140.0.7339.208
Fixed version : 142.0.7444.59/60

A web browser installed on the remote Windows host is affected by multiple vulnerabilities.

The version of Google Chrome installed on the remote Windows host is prior to 143.0.7499.109. It is, therefore, affected by multiple vulnerabilities as referenced in the 2025_12_stable-channel-update-for-desktop_10 advisory.

- Use after free in Password Manager. (CVE-2025-14372)

- Out of bounds memory access in ANGLE. (CVE-2025-14174)

- Inappropriate implementation in Toolbar. (CVE-2025-14373)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Upgrade to Google Chrome version 143.0.7499.109 or later.

Critical

8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)

8.2 (CVSS:3.0/E:F/RL:O/RC:C)

0.0622

10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)

8.3 (CVSS2#E:F/RL:OF/RC:C)

I

Published: 2025/12/10, Modified: 2025/12/17

Path : C:\Program Files\Google\Chrome\Application
Installed version : 140.0.7339.208
Fixed version : 143.0.7499.109/.110

A web browser installed on the remote Windows host is affected by multiple vulnerabilities.

The version of Google Chrome installed on the remote Windows host is prior to 143.0.7499.146. It is, therefore, affected by multiple vulnerabilities as referenced in the 2025_12_stable-channel-update-for-desktop_16 advisory.

- Use after free in WebGPU. (CVE-2025-14765)

- Out of bounds read and write in V8. (CVE-2025-14766)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Upgrade to Google Chrome version 143.0.7499.146 or later.

Critical

9.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)

8.5 (CVSS:3.0/E:U/RL:O/RC:C)

0.0003

10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)

7.4 (CVSS2#E:U/RL:OF/RC:C)

I

Published: 2025/12/16, Modified: 2025/12/19

Path : C:\Program Files\Google\Chrome\Application
Installed version : 140.0.7339.208
Fixed version : 143.0.7499.146/.147

A web browser installed on the remote Windows host is affected by multiple vulnerabilities.

The version of Google Chrome installed on the remote Windows host is prior to 143.0.7499.40. It is, therefore, affected by multiple vulnerabilities as referenced in the 2025_12_stable-channel-update-for-desktop advisory.

- Use after free in Media Stream in Google Chrome prior to 143.0.7499.41 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Low) (CVE-2025-13638)

- Bad cast in Loader in Google Chrome prior to 143.0.7499.41 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) (CVE-2025-13720)

- Type Confusion in V8 in Google Chrome prior to 143.0.7499.41 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2025-13630)

- Inappropriate implementation in Google Updater in Google Chrome on Mac prior to 143.0.7499.41 allowed a remote attacker to perform privilege escalation via a crafted file. (Chromium security severity: High) (CVE-2025-13631)

- Inappropriate implementation in DevTools in Google Chrome prior to 143.0.7499.41 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension. (Chromium security severity: High) (CVE-2025-13632)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Upgrade to Google Chrome version 143.0.7499.40 or later.

Critical

8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)

7.7 (CVSS:3.0/E:U/RL:O/RC:C)

0.0007

10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)

7.4 (CVSS2#E:U/RL:OF/RC:C)

I

Published: 2025/12/02, Modified: 2025/12/05

Path : C:\Program Files\Google\Chrome\Application
Installed version : 140.0.7339.208
Fixed version : 143.0.7499.40/41

The remote Windows host is affected by multiple vulnerabilities.

The remote Windows host is missing security update 5065432 or hotpatch 5065306. It is, therefore, affected by multiple vulnerabilities

- SMB Server might be susceptible to relay attacks depending on the configuration. An attacker who successfully exploited these vulnerabilities could perform relay attacks and make the users subject to elevation of privilege attacks. The SMB Server already supports mechanisms for hardening against relay attacks: SMB Server signing SMB Server Extended Protection for Authentication (EPA) Microsoft is releasing this CVE to provide customers with audit capabilities to help them to assess their environment and to identify any potential device or software incompatibility issues before deploying SMB Server hardening measures that protect against relay attacks. If you have not already enabled SMB Server hardening measures, we advise customers to take the following actions to be protected from these relay attacks:
Assess your environment by utilizing the audit capabilities that we are exposing in the September 2025 security updates. See Support for Audit Events to deploy SMB Server HardeningSMB Server Signing & SMB Server EPA. Adopt appropriate SMB Server hardening measures. (CVE-2025-55234)

- Improper restriction of communication channel to intended endpoints in Windows PowerShell allows an authorized attacker to elevate privileges locally. (CVE-2025-49734)

- Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. (CVE-2025-53796, CVE-2025-53797, CVE-2025-53798, CVE-2025-53806)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Apply Security Update 5065432 or hotpatch 5065306

Critical

8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)

7.7 (CVSS:3.0/E:U/RL:O/RC:C)

0.0073

10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)

7.4 (CVSS2#E:U/RL:OF/RC:C)

I

Published: 2025/09/09, Modified: 2025/10/29

The remote host is missing one of the following rollup KBs :
- 5065432
- 5065306

- C:\Windows\system32\ntoskrnl.exe has not been patched.
Remote version : 10.0.20348.4050
Should be : 10.0.20348.4163

The remote Windows host is affected by multiple vulnerabilities.

The remote Windows host is missing security update 5068787. It is, therefore, affected by multiple vulnerabilities

- A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. (CVE-2025-60724, CVE-2025-60714, CVE-2025-60715, CVE-2025-62452)
- An information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information.
(CVE-2025-59509, CVE-2025-59513, CVE-2025-60706, CVE-2025-62208, CVE-2025-62209)
- An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges.
(CVE-2025-59505, CVE-2025-59506, CVE-2025-59507, CVE-2025-59508, CVE-2025-59511, CVE-2025-59512, CVE-2025-59514, CVE-2025-59515, CVE-2025-60703, CVE-2025-60704, CVE-2025-60705, CVE-2025-60707, CVE-2025-60709, CVE-2025-60713, CVE-2025-60716, CVE-2025-60717, CVE-2025-60719, CVE-2025-60720, CVE-2025-62213, CVE-2025-62215, CVE-2025-62217)


Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Apply Security Update 5068787

Critical

7.0 (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)

6.5 (CVSS:3.0/E:F/RL:O/RC:C)

0.0009

10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)

8.3 (CVSS2#E:F/RL:OF/RC:C)

I

Published: 2025/11/11, Modified: 2025/12/08

The remote host is missing one of the following rollup KBs :
- 5068787

- C:\Windows\system32\ntoskrnl.exe has not been patched.
Remote version : 10.0.20348.4050
Should be : 10.0.20348.4405

The remote Windows host is affected by multiple vulnerabilities.

The remote Windows host is missing security update 5071547 or hotpatch 5071413. It is, therefore, affected by multiple vulnerabilities

- Untrusted pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network. (CVE-2025-62549)

- Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to execute code over a network. (CVE-2025-62456)

- Out-of-bounds read in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. (CVE-2025-62457)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Apply Security Update 5071547

Critical

7.8 (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)

7.2 (CVSS:3.0/E:F/RL:O/RC:C)

0.0821

10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)

8.3 (CVSS2#E:F/RL:OF/RC:C)

I

Published: 2025/12/09, Modified: 2025/12/17

The remote host is missing one of the following rollup KBs :
- 5071547
- 5071413

- C:\Windows\system32\ntoskrnl.exe has not been patched.
Remote version : 10.0.20348.4050
Should be : 10.0.20348.4529

A web browser installed on the remote Windows host is affected by multiple vulnerabilities.

The version of Google Chrome installed on the remote Windows host is prior to 142.0.7444.134. It is, therefore, affected by multiple vulnerabilities as referenced in the 2025_11_stable-channel-update-for-desktop advisory.

- Inappropriate implementation in V8 in Google Chrome prior to 142.0.7444.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2025-12727)

- Out of bounds read in WebGPU in Google Chrome on Android prior to 142.0.7444.137 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High) (CVE-2025-12725)

- Inappropriate implementation in Views in Google Chrome on Windows prior to 142.0.7444.137 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted HTML page.
(Chromium security severity: High) (CVE-2025-12726)

- Inappropriate implementation in Omnibox in Google Chrome on Android prior to 142.0.7444.137 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) (CVE-2025-12728, CVE-2025-12729)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Upgrade to Google Chrome version 142.0.7444.134 or later.

High

8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)

7.7 (CVSS:3.0/E:U/RL:O/RC:C)

0.0007

7.5 (CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P)

5.5 (CVSS2#E:U/RL:OF/RC:C)

I

Published: 2025/11/05, Modified: 2025/11/20

Path : C:\Program Files\Google\Chrome\Application
Installed version : 140.0.7339.208
Fixed version : 142.0.7444.134/.135

A web browser installed on the remote Windows host is affected by multiple vulnerabilities.

The version of Google Chrome installed on the remote Windows host is prior to 142.0.7444.175. It is, therefore, affected by multiple vulnerabilities as referenced in the 2025_11_stable-channel-update-for-desktop_17 advisory.

- Type Confusion in V8 in Google Chrome prior to 142.0.7444.175 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2025-13223, CVE-2025-13224)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Upgrade to Google Chrome version 142.0.7444.175 or later.

High

8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)

8.2 (CVSS:3.0/E:F/RL:O/RC:C)

0.155

7.5 (CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P)

6.2 (CVSS2#E:F/RL:OF/RC:C)

I

Published: 2025/11/17, Modified: 2025/11/21

Path : C:\Program Files\Google\Chrome\Application
Installed version : 140.0.7339.208
Fixed version : 142.0.7444.175/.176

The remote Windows host is affected by multiple vulnerabilities.

The remote Windows host is missing security update 5066782. It is, therefore, affected by multiple vulnerabilities

- tif_predict.h and tif_predict.c in libtiff 4.0.6 have assertions that can lead to assertion failures in debug mode, or buffer overflows in release mode, when dealing with unusual tile size like YCbCr with subsampling. Reported as MSVR 35105, aka Predictor heap-buffer-overflow. (CVE-2016-9535)

- In IGEL OS before 11, Secure Boot can be bypassed because the igel-flash-driver module improperly verifies a cryptographic signature. Ultimately, a crafted root filesystem can be mounted from an unverified SquashFS image. (CVE-2025-47827)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Apply Security Update 5066782

High

9.9 (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)

9.2 (CVSS:3.0/E:F/RL:O/RC:C)

0.0824

7.5 (CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P)

6.2 (CVSS2#E:F/RL:OF/RC:C)

I

Published: 2025/10/14, Modified: 2025/11/18

The remote host is missing one of the following rollup KBs :
- 5066782

- C:\Windows\system32\ntoskrnl.exe has not been patched.
Remote version : 10.0.20348.4050
Should be : 10.0.20348.4294

The remote Windows host is potentially missing a mitigation for a remote code execution vulnerability.

The remote system may be in a vulnerable state to CVE-2013-3900 due to a missing or misconfigured registry keys:
- HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\Wintrust\Config\EnableCertPaddingCheck
- HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Cryptography\Wintrust\Config\EnableCertPaddingCheck An unauthenticated, remote attacker could exploit this, by sending specially crafted requests, to execute arbitrary code on an affected host.

Add and enable registry value EnableCertPaddingCheck:
- HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\Wintrust\Config\EnableCertPaddingCheck

Additionally, on 64 Bit OS systems, Add and enable registry value EnableCertPaddingCheck:

- HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Cryptography\Wintrust\Config\EnableCertPaddingCheck

High

8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)

8.4 (CVSS:3.0/E:H/RL:O/RC:C)

0.8023

7.6 (CVSS2#AV:N/AC:H/Au:N/C:C/I:C/A:C)

6.6 (CVSS2#E:H/RL:OF/RC:C)

II

Published: 2022/10/26, Modified: 2025/12/17

Nessus detected the following potentially insecure registry key configuration:
- Software\Microsoft\Cryptography\Wintrust\Config\EnableCertPaddingCheck is not present in the registry.
- Software\Wow6432Node\Microsoft\Cryptography\Wintrust\Config\EnableCertPaddingCheck is not present in the registry.

The remote name server allows zone transfers

The remote name server allows DNS zone transfers to be performed.

A zone transfer lets a remote attacker instantly populate a list of potential targets. In addition, companies often use a naming convention that can give hints as to a servers primary application (for instance, proxy.example.com, payroll.example.com, b2b.example.com, etc.).

As such, this information is of great use to an attacker, who may use it to gain information about the topology of the network and spot new targets.

Limit DNS zone transfers to only the servers that need the information.

Medium

3.6

0.8222

5.0 (CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N)

4.2 (CVSS2#E:U/RL:ND/RC:C)

Published: 2001/01/16, Modified: 2025/08/19

+ Domain "swansea.acca":
swansea.acca. has address 20.0.0.1
swansea.acca. has address 10.0.2.15
swansea.acca. has address 192.168.1.1
swansea.acca. name server s-dc.swansea.acca.
swansea.acca. has IPv6 address fd17:625c:f037:0002:cfd0:7c37:27cc:03d7
_msdcs.swansea.acca. name server s-dc.swansea.acca.
_gc._tcp.Default-First-Site-Name._sites.swansea.acca. service locator 0 100 25612 s-dc.swansea.acca.
_kerberos._tcp.Default-First-Site-Name._sites.swansea.acca. service locator 0 100 25600 s-dc.swansea.acca.
_ldap._tcp.Default-First-Site-Name._sites.swansea.acca. service locator 0 100 25601 s-dc.swansea.acca.
_gc._tcp.swansea.acca. service locator 0 100 25612 s-dc.swansea.acca.
_kerberos._tcp.swansea.acca. service locator 0 100 25600 s-dc.swansea.acca.
_kpasswd._tcp.swansea.acca. service locator 0 100 25601 s-dc.swansea.acca.
_ldap._tcp.swansea.acca. service locator 0 100 25601 s-dc.swansea.acca.
_kerberos._udp.swansea.acca. service locator 0 100 25600 s-dc.swansea.acca.
_kpasswd._udp.swansea.acca. service locator 0 100 25601 s-dc.swansea.acca.
ClientS1.swansea.acca. has address 192.168.1.10
confidential.swansea.acca. has address 192.168.1.1
DomainDnsZones.swansea.acca. has address 10.0.2.15
DomainDnsZones.swansea.acca. has address 192.168.1.1
DomainDnsZones.swansea.acca. has address 20.0.0.1
DomainDnsZones.swansea.acca. has IPv6 address fd17:625c:f037:0002:cfd0:7c37:27cc:03d7
_ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.swansea.acca. service locator 0 100 25601 s-dc.swansea.acca.
_ldap._tcp.DomainDnsZones.swansea.acca. service locator 0 100 25601 s-dc.swansea.acca.
ForestDnsZones.swansea.acca. has address 10.0.2.15
ForestDnsZones.swansea.acca. has address 20.0.0.1
ForestDnsZones.swansea.acca. has address 192.168.1.1
ForestDnsZones.swansea.acca. has IPv6 address fd17:625c:f037:0002:cfd0:7c37:27cc:03d7
_ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.swansea.acca. service locator 0 100 25601 s-dc.swansea.acca.
_ldap._tcp.ForestDnsZones.swansea.acca. service locator 0 100 25601 s-dc.swansea.acca.
s-dc.swansea.acca. has address 20.0.0.1
s-dc.swansea.acca. has address 192.168.1.1
s-dc.swansea.acca. has address 10.0.2.15
s-dc.swansea.acca. has IPv6 address fd17:625c:f037:0002:cfd0:7c37:27cc:03d7
secret.swansea.acca. has address 192.168.1.1

An echo service is running on the remote host.

The remote host is running the 'echo' service. This service echoes any data which is sent to it.

This service is unused these days, so it is strongly advised that you disable it, as it may be used by attackers to set up denial of services attacks against this host.

Below are some examples of how to disable the echo service on some common platforms, however many services can exhibit this behavior and the list below is not exhaustive.

Consult vendor documentation for the service exhibiting the echo behavior for more information.

- Under Unix systems, comment out the 'echo' line in /etc/inetd.conf and restart the inetd process.

- Under Ubuntu systems, comment out the 'echo' line in /etc/systemd/system.conf and retart the systemd service.

- Under Windows systems, set the following registry key to 0 :
HKLM\System\CurrentControlSet\Services\SimpTCP\Parameters\EnableTcpEcho HKLM\System\CurrentControlSet\Services\SimpTCP\Parameters\EnableUdpEcho

Then launch cmd.exe and type :

net stop simptcp net start simptcp

To restart the service.

Medium

6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)

3.6

0.4809

5.0 (CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P)

Published: 1999/06/22, Modified: 2020/06/12

An echo service is running on the remote host.

The remote host is running the 'echo' service. This service echoes any data which is sent to it.

This service is unused these days, so it is strongly advised that you disable it, as it may be used by attackers to set up denial of services attacks against this host.

Below are some examples of how to disable the echo service on some common platforms, however many services can exhibit this behavior and the list below is not exhaustive.

Consult vendor documentation for the service exhibiting the echo behavior for more information.

- Under Unix systems, comment out the 'echo' line in /etc/inetd.conf and restart the inetd process.

- Under Ubuntu systems, comment out the 'echo' line in /etc/systemd/system.conf and retart the systemd service.

- Under Windows systems, set the following registry key to 0 :
HKLM\System\CurrentControlSet\Services\SimpTCP\Parameters\EnableTcpEcho HKLM\System\CurrentControlSet\Services\SimpTCP\Parameters\EnableUdpEcho

Then launch cmd.exe and type :

net stop simptcp net start simptcp

To restart the service.

Medium

6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)

3.6

0.4809

5.0 (CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P)

Published: 1999/06/22, Modified: 2020/06/12

A web browser installed on the remote Windows host is affected by a vulnerability.

The version of Google Chrome installed on the remote Windows host is prior to 141.0.7390.122. It is, therefore, affected by a vulnerability as referenced in the 2025_10_stable-channel-update-for-desktop_21 advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Upgrade to Google Chrome version 141.0.7390.122 or later.

Medium

I

Published: 2025/10/21, Modified: 2025/11/24

Path : C:\Program Files\Google\Chrome\Application
Installed version : 140.0.7339.208
Fixed version : 141.0.7390.122/.123

A web browser installed on the remote Windows host is affected by a vulnerability.

The version of Google Chrome installed on the remote Windows host is prior to 142.0.7444.162. It is, therefore, affected by a vulnerability as referenced in the 2025_11_stable-channel-update-for-desktop_11 advisory.

- Inappropriate implementation in V8 in Google Chrome prior to 142.0.7444.166 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2025-13042)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Upgrade to Google Chrome version 142.0.7444.162 or later.

Medium

8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)

7.7 (CVSS:3.0/E:U/RL:O/RC:C)

0.0007

6.8 (CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P)

5.0 (CVSS2#E:U/RL:OF/RC:C)

I

Published: 2025/11/12, Modified: 2025/11/20

Path : C:\Program Files\Google\Chrome\Application
Installed version : 140.0.7339.208
Fixed version : 142.0.7444.162/.163

A web browser installed on the remote Windows host is affected by a vulnerability.

The version of Google Chrome installed on the remote Windows host is prior to 143.0.7499.192. It is, therefore, affected by a vulnerability as referenced in the 2026_01_stable-channel-update-for-desktop advisory.

- Insufficient policy enforcement in WebView tag. (CVE-2026-0628)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Upgrade to Google Chrome version 143.0.7499.192 or later.

Medium

8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)

7.7 (CVSS:3.0/E:U/RL:O/RC:C)

0.0001

6.8 (CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P)

5.0 (CVSS2#E:U/RL:OF/RC:C)

I

Published: 2026/01/06, Modified: 2026/01/09

Path : C:\Program Files\Google\Chrome\Application
Installed version : 140.0.7339.208
Fixed version : 143.0.7499.192/.193

The quote service (qotd) is running on this host.

A server listens for TCP connections on TCP port 17. Once a connection is established a short message is sent out the connection (and any data received is thrown away). The service closes the connection after sending the quote.

Another quote of the day service is defined as a datagram based application on UDP. A server listens for UDP datagrams on UDP port 17.
When a datagram is received, an answering datagram is sent containing a quote (the data in the received datagram is ignored).

An easy attack is 'pingpong' which IP spoofs a packet between two machines running qotd. This will cause them to spew characters at each other, slowing the machines down and saturating the network.

- Under Unix systems, comment out the 'qotd' line in /etc/inetd.conf and restart the inetd process
- Under Windows systems, set the following registry keys to 0 :
HKLM\System\CurrentControlSet\Services\SimpTCP\Parameters\EnableTcpQotd HKLM\System\CurrentControlSet\Services\SimpTCP\Parameters\EnableUdpQotd Then launch cmd.exe and type :

net stop simptcp net start simptcp To restart the service.

Medium

6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)

3.6

0.4809

5.0 (CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P)

Published: 1999/11/30, Modified: 2019/10/04

The quote service (qotd) is running on this host.

A server listens for TCP connections on TCP port 17. Once a connection is established a short message is sent out the connection (and any data received is thrown away). The service closes the connection after sending the quote.

Another quote of the day service is defined as a datagram based application on UDP. A server listens for UDP datagrams on UDP port 17.
When a datagram is received, an answering datagram is sent containing a quote (the data in the received datagram is ignored).

An easy attack is 'pingpong' which IP spoofs a packet between two machines running qotd. This will cause them to spew characters at each other, slowing the machines down and saturating the network.

- Under Unix systems, comment out the 'qotd' line in /etc/inetd.conf and restart the inetd process
- Under Windows systems, set the following registry keys to 0 :
HKLM\System\CurrentControlSet\Services\SimpTCP\Parameters\EnableTcpQotd HKLM\System\CurrentControlSet\Services\SimpTCP\Parameters\EnableUdpQotd Then launch cmd.exe and type :

net stop simptcp net start simptcp To restart the service.

Medium

6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)

3.6

0.4809

5.0 (CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P)

Published: 1999/11/30, Modified: 2019/10/04

The SSL certificate for this service cannot be trusted.

The server's X.509 certificate cannot be trusted. This situation can occur in three different ways, in which the chain of trust can be broken, as stated below :

- First, the top of the certificate chain sent by the server might not be descended from a known public certificate authority. This can occur either when the top of the chain is an unrecognized, self-signed certificate, or when intermediate certificates are missing that would connect the top of the certificate chain to a known public certificate authority.

- Second, the certificate chain may contain a certificate that is not valid at the time of the scan. This can occur either when the scan occurs before one of the certificate's 'notBefore' dates, or after one of the certificate's 'notAfter' dates.

- Third, the certificate chain may contain a signature that either didn't match the certificate's information or could not be verified. Bad signatures can be fixed by getting the certificate with the bad signature to be re-signed by its issuer. Signatures that could not be verified are the result of the certificate's issuer using a signing algorithm that Nessus either does not support or does not recognize.

If the remote host is a public host in production, any break in the chain makes it more difficult for users to verify the authenticity and identity of the web server. This could make it easier to carry out man-in-the-middle attacks against the remote host.

Purchase or generate a proper SSL certificate for this service.

Medium

6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)

6.4 (CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:N)

Published: 2010/12/15, Modified: 2025/06/16

The following certificate was at the top of the certificate
chain sent by the remote host, but it is signed by an unknown
certificate authority :

|-Subject : O=Nessus Users United/OU=Nessus Server/L=New York/C=US/ST=NY/CN=S-DC
|-Issuer : O=Nessus Users United/OU=Nessus Certification Authority/L=New York/C=US/ST=NY/CN=Nessus Certification Authority

The remote service supports the use of medium strength SSL ciphers.

The remote host supports the use of SSL ciphers that offer medium strength encryption. Nessus regards medium strength as any encryption that uses key lengths at least 64 bits and less than 112 bits, or else that uses the 3DES encryption suite.

Note that it is considerably easier to circumvent medium strength encryption if the attacker is on the same physical network.

Reconfigure the affected application if possible to avoid use of medium strength ciphers.

Medium

7.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)

6.1

0.4002

5.0 (CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N)

Published: 2009/11/23, Modified: 2025/02/12

Medium Strength Ciphers (> 64-bit and < 112-bit key, or 3DES)

Name Code KEX Auth Encryption MAC
---------------------- ---------- --- ---- --------------------- ---
DES-CBC3-SHA 0x00, 0x0A RSA RSA 3DES-CBC(168) SHA1

The fields above are :

{Tenable ciphername}
{Cipher ID code}
Kex={key exchange}
Auth={authentication}
Encrypt={symmetric encryption method}
MAC={message authentication code}
{export flag}

The remote service encrypts traffic using an older version of TLS.

The remote service accepts connections encrypted using TLS 1.0. TLS 1.0 has a number of cryptographic design flaws. Modern implementations of TLS 1.0 mitigate these problems, but newer versions of TLS like 1.2 and 1.3 are designed against these flaws and should be used whenever possible.

As of March 31, 2020, Endpoints that aren’t enabled for TLS 1.2 and higher will no longer function properly with major web browsers and major vendors.

PCI DSS v3.2 requires that TLS 1.0 be disabled entirely by June 30, 2018, except for POS POI terminals (and the SSL/TLS termination points to which they connect) that can be verified as not being susceptible to any known exploits.

Enable support for TLS 1.2 and 1.3, and disable support for TLS 1.0.

Medium

6.5 (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N)

6.1 (CVSS2#AV:N/AC:H/Au:N/C:C/I:P/A:N)

Published: 2017/11/22, Modified: 2023/04/19

TLSv1 is enabled and the server supports at least one cipher.

The remote service encrypts traffic using an older version of TLS.

The remote service accepts connections encrypted using TLS 1.1. TLS 1.1 lacks support for current and recommended cipher suites. Ciphers that support encryption before MAC computation, and authenticated encryption modes such as GCM cannot be used with TLS 1.1

As of March 31, 2020, Endpoints that are not enabled for TLS 1.2 and higher will no longer function properly with major web browsers and major vendors.

Enable support for TLS 1.2 and/or 1.3, and disable support for TLS 1.1.

Medium

6.5 (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N)

6.1 (CVSS2#AV:N/AC:H/Au:N/C:C/I:P/A:N)

Published: 2022/04/04, Modified: 2024/05/14

TLSv1.1 is enabled and the server supports at least one cipher.

The remote host has not properly mitigated a series of speculative execution vulnerabilities.

The remote host has not properly mitigated a series of known speculative execution vulnerabilities. It, therefore, may be affected by :
- Branch Target Injection (BTI) (CVE-2017-5715)
- Bounds Check Bypass (BCB) (CVE-2017-5753)
- Rogue Data Cache Load (RDCL) (CVE-2017-5754)
- Rogue System Register Read (RSRE) (CVE-2018-3640)
- Speculative Store Bypass (SSB) (CVE-2018-3639)
- L1 Terminal Fault (L1TF) (CVE-2018-3615, CVE-2018-3620, CVE-2018-3646)
- Microarchitectural Data Sampling Uncacheable Memory (MDSUM) (CVE-2019-11091)
- Microarchitectural Store Buffer Data Sampling (MSBDS) (CVE-2018-12126)
- Microarchitectural Load Port Data Sampling (MLPDS) (CVE-2018-12127)
- Microarchitectural Fill Buffer Data Sampling (MFBDS) (CVE-2018-12130)
- TSX Asynchronous Abort (TAA) (CVE-2019-11135)
- Intel Branch History Injection (BHI) (CVE-2022-0001)

Apply vendor recommended settings.

Medium

6.5 (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N)

6.2 (CVSS:3.0/E:H/RL:O/RC:C)

0.9433

5.4 (CVSS2#AV:L/AC:M/Au:N/C:C/I:P/A:N)

4.7 (CVSS2#E:H/RL:OF/RC:C)

CANVAS (true) Core Impact (true)

Published: 2019/12/18, Modified: 2026/01/09

Current Settings:
- SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management\
FeatureSettingsOverrideMask: Not Set
- SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management\
FeatureSettingsOverride: Not Set

-----------------------------------

Recommended Settings 1:
- SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management\
FeatureSettingsOverrideMask: 0x00000003 (3)
- SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management\
FeatureSettingsOverride: 0x00000048 (72)
CVEs Covered:
CVE-2017-5715, CVE-2017-5753, CVE-2017-5754, CVE-2018-3615, CVE-2018-3620,
CVE-2018-3639, CVE-2018-3646, CVE-2018-11091, CVE-2018-12126, CVE-2018-12127,
CVE-2018-12130, CVE-2019-11135
Note: Hyper-Threading enabled.

-----------------------------------

Recommended Settings 2:
- SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management\
FeatureSettingsOverrideMask: 0x00000003 (3)
- SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management\
FeatureSettingsOverride: 0x00002048 (8264)
CVEs Covered:
CVE-2017-5715, CVE-2017-5753, CVE-2017-5754, CVE-2018-3615, CVE-2018-3620,
CVE-2018-3639, CVE-2018-3646, CVE-2018-11091, CVE-2018-12126, CVE-2018-12127,
CVE-2018-12130, CVE-2019-11135
Note: Hyper-Threading disabled.

-----------------------------------

Recommended Settings 3:
- SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management\
FeatureSettingsOverrideMask: 0x00000003 (3)
- SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management\
FeatureSettingsOverride: 0x00802048 (8396872)
CVEs Covered:
CVE-2017-5715, CVE-2017-5753, CVE-2017-5754, CVE-2018-3615, CVE-2018-3620,
CVE-2018-3639, CVE-2018-3646, CVE-2018-11091, CVE-2018-12126, CVE-2018-12127,
CVE-2018-12130, CVE-2019-11135, CVE-2022-0001
Note: Hyper-Threading disabled.

-----------------------------------

Recommended Settings 4:
- SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management\
FeatureSettingsOverrideMask: 0x00000003 (3)
- SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management\
FeatureSettingsOverride: 0x00800048 (8388680)
CVEs Covered:
CVE-2017-5715, CVE-2017-5753, CVE-2017-5754, CVE-2018-3615, CVE-2018-3620,
CVE-2018-3639, CVE-2018-3646, CVE-2018-11091, CVE-2018-12126, CVE-2018-12127,
CVE-2018-12130, CVE-2019-11135, CVE-2022-0001
Note: Hyper-Threading enabled.

A web browser installed on the remote Windows host is affected by a vulnerability.

The version of Google Chrome installed on the remote Windows host is prior to 141.0.7390.107. It is, therefore, affected by a vulnerability as referenced in the 2025_10_stable-channel-update-for-desktop_14 advisory.

- Use after free in Safe Browsing in Google Chrome prior to 141.0.7390.107 allowed a remote attacker who had compromised the renderer process to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High) (CVE-2025-11756)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Upgrade to Google Chrome version 141.0.7390.107 or later.

Critical

8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)

7.7 (CVSS:3.0/E:U/RL:O/RC:C)

0.0004

10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)

7.4 (CVSS2#E:U/RL:OF/RC:C)

I

Published: 2025/10/14, Modified: 2025/11/20

Path : C:\Program Files\Google\Chrome\Application
Installed version : 140.0.7339.208
Fixed version : 141.0.7390.107/.108

A web browser installed on the remote Windows host is affected by multiple vulnerabilities.

The version of Google Chrome installed on the remote Windows host is prior to 141.0.7390.54. It is, therefore, affected by multiple vulnerabilities as referenced in the 2025_09_stable-channel-update-for-desktop_30 advisory.

- Use after free in V8 in Google Chrome prior to 141.0.7390.54 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Low) (CVE-2025-11219)

- Heap buffer overflow in WebGPU in Google Chrome prior to 141.0.7390.54 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2025-11205)

- Heap buffer overflow in Video in Google Chrome prior to 141.0.7390.54 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High) (CVE-2025-11206)

- Side-channel information leakage in Storage in Google Chrome prior to 141.0.7390.54 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: Medium) (CVE-2025-11207)

- Inappropriate implementation in Media in Google Chrome prior to 141.0.7390.54 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page.
(Chromium security severity: Medium) (CVE-2025-11208)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Upgrade to Google Chrome version 141.0.7390.54 or later.

Critical

8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)

7.7 (CVSS:3.0/E:U/RL:O/RC:C)

0.0005

10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)

7.4 (CVSS2#E:U/RL:OF/RC:C)

I

Published: 2025/10/01, Modified: 2025/11/20

Path : C:\Program Files\Google\Chrome\Application
Installed version : 140.0.7339.208
Fixed version : 141.0.7390.54/55

A web browser installed on the remote Windows host is affected by multiple vulnerabilities.

The version of Google Chrome installed on the remote Windows host is prior to 141.0.7390.65. It is, therefore, affected by multiple vulnerabilities as referenced in the 2025_10_stable-channel-update-for-desktop advisory.

- Use after free in Storage in Google Chrome prior to 141.0.7390.65 allowed a remote attacker to execute arbitrary code via a crafted video file. (Chromium security severity: High) (CVE-2025-11460)

- Heap buffer overflow in Sync in Google Chrome prior to 141.0.7390.65 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: High) (CVE-2025-11458)

- Out of bounds read in Media in Google Chrome prior to 141.0.7390.54 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity:
Medium) (CVE-2025-11211)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Upgrade to Google Chrome version 141.0.7390.65 or later.

Critical

8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)

7.7 (CVSS:3.0/E:U/RL:O/RC:C)

0.0004

10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)

7.4 (CVSS2#E:U/RL:OF/RC:C)

I

Published: 2025/10/07, Modified: 2025/11/24

Path : C:\Program Files\Google\Chrome\Application
Installed version : 140.0.7339.208
Fixed version : 141.0.7390.65/.66

A web browser installed on the remote Windows host is affected by multiple vulnerabilities.

The version of Google Chrome installed on the remote Windows host is prior to 142.0.7444.59. It is, therefore, affected by multiple vulnerabilities as referenced in the 2025_10_stable-channel-update-for-desktop_28 advisory.

- Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2025-13226, CVE-2025-13227, CVE-2025-13228, CVE-2025-13229, CVE-2025-13230)

- Use after free in Ozone in Google Chrome on Linux and ChromeOS prior to 142.0.7444.59 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (Chromium security severity:
Medium) (CVE-2025-12438)

- Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High) (CVE-2025-12428)

- Inappropriate implementation in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High) (CVE-2025-12429)

- Object lifecycle issue in Media in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: High) (CVE-2025-12430)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Upgrade to Google Chrome version 142.0.7444.59 or later.

Critical

8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)

7.9 (CVSS:3.0/E:P/RL:O/RC:C)

0.0007

10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)

7.8 (CVSS2#E:POC/RL:OF/RC:C)

I

Published: 2025/10/29, Modified: 2025/11/24

Path : C:\Program Files\Google\Chrome\Application
Installed version : 140.0.7339.208
Fixed version : 142.0.7444.59/60

A web browser installed on the remote Windows host is affected by multiple vulnerabilities.

The version of Google Chrome installed on the remote Windows host is prior to 143.0.7499.109. It is, therefore, affected by multiple vulnerabilities as referenced in the 2025_12_stable-channel-update-for-desktop_10 advisory.

- Use after free in Password Manager. (CVE-2025-14372)

- Out of bounds memory access in ANGLE. (CVE-2025-14174)

- Inappropriate implementation in Toolbar. (CVE-2025-14373)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Upgrade to Google Chrome version 143.0.7499.109 or later.

Critical

8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)

8.2 (CVSS:3.0/E:F/RL:O/RC:C)

0.0622

10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)

8.3 (CVSS2#E:F/RL:OF/RC:C)

I

Published: 2025/12/10, Modified: 2025/12/17

Path : C:\Program Files\Google\Chrome\Application
Installed version : 140.0.7339.208
Fixed version : 143.0.7499.109/.110

A web browser installed on the remote Windows host is affected by multiple vulnerabilities.

The version of Google Chrome installed on the remote Windows host is prior to 143.0.7499.146. It is, therefore, affected by multiple vulnerabilities as referenced in the 2025_12_stable-channel-update-for-desktop_16 advisory.

- Use after free in WebGPU. (CVE-2025-14765)

- Out of bounds read and write in V8. (CVE-2025-14766)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Upgrade to Google Chrome version 143.0.7499.146 or later.

Critical

9.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)

8.5 (CVSS:3.0/E:U/RL:O/RC:C)

0.0003

10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)

7.4 (CVSS2#E:U/RL:OF/RC:C)

I

Published: 2025/12/16, Modified: 2025/12/19

Path : C:\Program Files\Google\Chrome\Application
Installed version : 140.0.7339.208
Fixed version : 143.0.7499.146/.147

A web browser installed on the remote Windows host is affected by multiple vulnerabilities.

The version of Google Chrome installed on the remote Windows host is prior to 143.0.7499.40. It is, therefore, affected by multiple vulnerabilities as referenced in the 2025_12_stable-channel-update-for-desktop advisory.

- Use after free in Media Stream in Google Chrome prior to 143.0.7499.41 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Low) (CVE-2025-13638)

- Bad cast in Loader in Google Chrome prior to 143.0.7499.41 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) (CVE-2025-13720)

- Type Confusion in V8 in Google Chrome prior to 143.0.7499.41 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2025-13630)

- Inappropriate implementation in Google Updater in Google Chrome on Mac prior to 143.0.7499.41 allowed a remote attacker to perform privilege escalation via a crafted file. (Chromium security severity: High) (CVE-2025-13631)

- Inappropriate implementation in DevTools in Google Chrome prior to 143.0.7499.41 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension. (Chromium security severity: High) (CVE-2025-13632)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Upgrade to Google Chrome version 143.0.7499.40 or later.

Critical

8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)

7.7 (CVSS:3.0/E:U/RL:O/RC:C)

0.0007

10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)

7.4 (CVSS2#E:U/RL:OF/RC:C)

I

Published: 2025/12/02, Modified: 2025/12/05

Path : C:\Program Files\Google\Chrome\Application
Installed version : 140.0.7339.208
Fixed version : 143.0.7499.40/41

The remote Windows host is affected by multiple vulnerabilities.

The remote Windows host is missing security update 5065432 or hotpatch 5065306. It is, therefore, affected by multiple vulnerabilities

- SMB Server might be susceptible to relay attacks depending on the configuration. An attacker who successfully exploited these vulnerabilities could perform relay attacks and make the users subject to elevation of privilege attacks. The SMB Server already supports mechanisms for hardening against relay attacks: SMB Server signing SMB Server Extended Protection for Authentication (EPA) Microsoft is releasing this CVE to provide customers with audit capabilities to help them to assess their environment and to identify any potential device or software incompatibility issues before deploying SMB Server hardening measures that protect against relay attacks. If you have not already enabled SMB Server hardening measures, we advise customers to take the following actions to be protected from these relay attacks:
Assess your environment by utilizing the audit capabilities that we are exposing in the September 2025 security updates. See Support for Audit Events to deploy SMB Server HardeningSMB Server Signing & SMB Server EPA. Adopt appropriate SMB Server hardening measures. (CVE-2025-55234)

- Improper restriction of communication channel to intended endpoints in Windows PowerShell allows an authorized attacker to elevate privileges locally. (CVE-2025-49734)

- Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. (CVE-2025-53796, CVE-2025-53797, CVE-2025-53798, CVE-2025-53806)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Apply Security Update 5065432 or hotpatch 5065306

Critical

8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)

7.7 (CVSS:3.0/E:U/RL:O/RC:C)

0.0073

10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)

7.4 (CVSS2#E:U/RL:OF/RC:C)

I

Published: 2025/09/09, Modified: 2025/10/29

The remote host is missing one of the following rollup KBs :
- 5065432
- 5065306

- C:\Windows\system32\ntoskrnl.exe has not been patched.
Remote version : 10.0.20348.4050
Should be : 10.0.20348.4163

The remote Windows host is affected by multiple vulnerabilities.

The remote Windows host is missing security update 5068787. It is, therefore, affected by multiple vulnerabilities

- A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. (CVE-2025-60724, CVE-2025-60714, CVE-2025-60715, CVE-2025-62452)
- An information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information.
(CVE-2025-59509, CVE-2025-59513, CVE-2025-60706, CVE-2025-62208, CVE-2025-62209)
- An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges.
(CVE-2025-59505, CVE-2025-59506, CVE-2025-59507, CVE-2025-59508, CVE-2025-59511, CVE-2025-59512, CVE-2025-59514, CVE-2025-59515, CVE-2025-60703, CVE-2025-60704, CVE-2025-60705, CVE-2025-60707, CVE-2025-60709, CVE-2025-60713, CVE-2025-60716, CVE-2025-60717, CVE-2025-60719, CVE-2025-60720, CVE-2025-62213, CVE-2025-62215, CVE-2025-62217)


Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Apply Security Update 5068787

Critical

7.0 (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)

6.5 (CVSS:3.0/E:F/RL:O/RC:C)

0.0009

10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)

8.3 (CVSS2#E:F/RL:OF/RC:C)

I

Published: 2025/11/11, Modified: 2025/12/08

The remote host is missing one of the following rollup KBs :
- 5068787

- C:\Windows\system32\ntoskrnl.exe has not been patched.
Remote version : 10.0.20348.4050
Should be : 10.0.20348.4405

The remote Windows host is affected by multiple vulnerabilities.

The remote Windows host is missing security update 5071547 or hotpatch 5071413. It is, therefore, affected by multiple vulnerabilities

- Untrusted pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network. (CVE-2025-62549)

- Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to execute code over a network. (CVE-2025-62456)

- Out-of-bounds read in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. (CVE-2025-62457)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Apply Security Update 5071547

Critical

7.8 (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)

7.2 (CVSS:3.0/E:F/RL:O/RC:C)

0.0821

10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)

8.3 (CVSS2#E:F/RL:OF/RC:C)

I

Published: 2025/12/09, Modified: 2025/12/17

The remote host is missing one of the following rollup KBs :
- 5071547
- 5071413

- C:\Windows\system32\ntoskrnl.exe has not been patched.
Remote version : 10.0.20348.4050
Should be : 10.0.20348.4529

A web browser installed on the remote Windows host is affected by multiple vulnerabilities.

The version of Google Chrome installed on the remote Windows host is prior to 142.0.7444.134. It is, therefore, affected by multiple vulnerabilities as referenced in the 2025_11_stable-channel-update-for-desktop advisory.

- Inappropriate implementation in V8 in Google Chrome prior to 142.0.7444.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2025-12727)

- Out of bounds read in WebGPU in Google Chrome on Android prior to 142.0.7444.137 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High) (CVE-2025-12725)

- Inappropriate implementation in Views in Google Chrome on Windows prior to 142.0.7444.137 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted HTML page.
(Chromium security severity: High) (CVE-2025-12726)

- Inappropriate implementation in Omnibox in Google Chrome on Android prior to 142.0.7444.137 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) (CVE-2025-12728, CVE-2025-12729)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Upgrade to Google Chrome version 142.0.7444.134 or later.

High

8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)

7.7 (CVSS:3.0/E:U/RL:O/RC:C)

0.0007

7.5 (CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P)

5.5 (CVSS2#E:U/RL:OF/RC:C)

I

Published: 2025/11/05, Modified: 2025/11/20

Path : C:\Program Files\Google\Chrome\Application
Installed version : 140.0.7339.208
Fixed version : 142.0.7444.134/.135

A web browser installed on the remote Windows host is affected by multiple vulnerabilities.

The version of Google Chrome installed on the remote Windows host is prior to 142.0.7444.175. It is, therefore, affected by multiple vulnerabilities as referenced in the 2025_11_stable-channel-update-for-desktop_17 advisory.

- Type Confusion in V8 in Google Chrome prior to 142.0.7444.175 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2025-13223, CVE-2025-13224)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Upgrade to Google Chrome version 142.0.7444.175 or later.

High

8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)

8.2 (CVSS:3.0/E:F/RL:O/RC:C)

0.155

7.5 (CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P)

6.2 (CVSS2#E:F/RL:OF/RC:C)

I

Published: 2025/11/17, Modified: 2025/11/21

Path : C:\Program Files\Google\Chrome\Application
Installed version : 140.0.7339.208
Fixed version : 142.0.7444.175/.176

The remote Windows host is affected by multiple vulnerabilities.

The remote Windows host is missing security update 5066782. It is, therefore, affected by multiple vulnerabilities

- tif_predict.h and tif_predict.c in libtiff 4.0.6 have assertions that can lead to assertion failures in debug mode, or buffer overflows in release mode, when dealing with unusual tile size like YCbCr with subsampling. Reported as MSVR 35105, aka Predictor heap-buffer-overflow. (CVE-2016-9535)

- In IGEL OS before 11, Secure Boot can be bypassed because the igel-flash-driver module improperly verifies a cryptographic signature. Ultimately, a crafted root filesystem can be mounted from an unverified SquashFS image. (CVE-2025-47827)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Apply Security Update 5066782

High

9.9 (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)

9.2 (CVSS:3.0/E:F/RL:O/RC:C)

0.0824

7.5 (CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P)

6.2 (CVSS2#E:F/RL:OF/RC:C)

I

Published: 2025/10/14, Modified: 2025/11/18

The remote host is missing one of the following rollup KBs :
- 5066782

- C:\Windows\system32\ntoskrnl.exe has not been patched.
Remote version : 10.0.20348.4050
Should be : 10.0.20348.4294

The remote Windows host is potentially missing a mitigation for a remote code execution vulnerability.

The remote system may be in a vulnerable state to CVE-2013-3900 due to a missing or misconfigured registry keys:
- HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\Wintrust\Config\EnableCertPaddingCheck
- HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Cryptography\Wintrust\Config\EnableCertPaddingCheck An unauthenticated, remote attacker could exploit this, by sending specially crafted requests, to execute arbitrary code on an affected host.

Add and enable registry value EnableCertPaddingCheck:
- HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\Wintrust\Config\EnableCertPaddingCheck

Additionally, on 64 Bit OS systems, Add and enable registry value EnableCertPaddingCheck:

- HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Cryptography\Wintrust\Config\EnableCertPaddingCheck

High

8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)

8.4 (CVSS:3.0/E:H/RL:O/RC:C)

0.8023

7.6 (CVSS2#AV:N/AC:H/Au:N/C:C/I:C/A:C)

6.6 (CVSS2#E:H/RL:OF/RC:C)

II

Published: 2022/10/26, Modified: 2025/12/17

Nessus detected the following potentially insecure registry key configuration:
- Software\Microsoft\Cryptography\Wintrust\Config\EnableCertPaddingCheck is not present in the registry.
- Software\Wow6432Node\Microsoft\Cryptography\Wintrust\Config\EnableCertPaddingCheck is not present in the registry.

The remote name server allows recursive queries to be performed by the host running nessusd.

It is possible to query the remote name server for third-party names.

If this is your internal nameserver, then the attack vector may be limited to employees or guest access if allowed.

If you are probing a remote nameserver, then it allows anyone to use it to resolve third party names (such as www.nessus.org).
This allows attackers to perform cache poisoning attacks against this nameserver.

If the host allows these recursive queries via UDP, then the host can be used to 'bounce' Denial of Service attacks against another network or system.

Restrict recursive queries to the hosts that should use this nameserver (such as those of the LAN connected to it).

If you are using bind 8, you can do this by using the instruction 'allow-recursion' in the 'options' section of your named.conf.

If you are using bind 9, you can define a grouping of internal addresses using the 'acl' command.

Then, within the options block, you can explicitly state:
'allow-recursion { hosts_defined_in_acl }'

If you are using another name server, consult its documentation.

Medium

4.2

0.0132

5.0 (CVSS2#AV:N/AC:L/Au:N/C:N/I:P/A:N)

3.7 (CVSS2#E:U/RL:OF/RC:C)

Published: 2000/10/27, Modified: 2018/06/27

The remote name server allows zone transfers

The remote name server allows DNS zone transfers to be performed.

A zone transfer lets a remote attacker instantly populate a list of potential targets. In addition, companies often use a naming convention that can give hints as to a servers primary application (for instance, proxy.example.com, payroll.example.com, b2b.example.com, etc.).

As such, this information is of great use to an attacker, who may use it to gain information about the topology of the network and spot new targets.

Limit DNS zone transfers to only the servers that need the information.

Medium

3.6

0.8222

5.0 (CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N)

4.2 (CVSS2#E:U/RL:ND/RC:C)

Published: 2001/01/16, Modified: 2025/08/19

+ Domain "swansea.acca":
swansea.acca. has address 20.0.0.1
swansea.acca. has address 10.0.2.15
swansea.acca. has address 192.168.1.1
swansea.acca. name server s-dc.swansea.acca.
swansea.acca. has IPv6 address fd17:625c:f037:0002:cfd0:7c37:27cc:03d7
_msdcs.swansea.acca. name server s-dc.swansea.acca.
_gc._tcp.Default-First-Site-Name._sites.swansea.acca. service locator 0 100 25612 s-dc.swansea.acca.
_kerberos._tcp.Default-First-Site-Name._sites.swansea.acca. service locator 0 100 25600 s-dc.swansea.acca.
_ldap._tcp.Default-First-Site-Name._sites.swansea.acca. service locator 0 100 25601 s-dc.swansea.acca.
_gc._tcp.swansea.acca. service locator 0 100 25612 s-dc.swansea.acca.
_kerberos._tcp.swansea.acca. service locator 0 100 25600 s-dc.swansea.acca.
_kpasswd._tcp.swansea.acca. service locator 0 100 25601 s-dc.swansea.acca.
_ldap._tcp.swansea.acca. service locator 0 100 25601 s-dc.swansea.acca.
_kerberos._udp.swansea.acca. service locator 0 100 25600 s-dc.swansea.acca.
_kpasswd._udp.swansea.acca. service locator 0 100 25601 s-dc.swansea.acca.
ClientS1.swansea.acca. has address 192.168.1.10
confidential.swansea.acca. has address 192.168.1.1
DomainDnsZones.swansea.acca. has address 10.0.2.15
DomainDnsZones.swansea.acca. has address 192.168.1.1
DomainDnsZones.swansea.acca. has address 20.0.0.1
DomainDnsZones.swansea.acca. has IPv6 address fd17:625c:f037:0002:cfd0:7c37:27cc:03d7
_ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.swansea.acca. service locator 0 100 25601 s-dc.swansea.acca.
_ldap._tcp.DomainDnsZones.swansea.acca. service locator 0 100 25601 s-dc.swansea.acca.
ForestDnsZones.swansea.acca. has address 10.0.2.15
ForestDnsZones.swansea.acca. has address 20.0.0.1
ForestDnsZones.swansea.acca. has address 192.168.1.1
ForestDnsZones.swansea.acca. has IPv6 address fd17:625c:f037:0002:cfd0:7c37:27cc:03d7
_ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.swansea.acca. service locator 0 100 25601 s-dc.swansea.acca.
_ldap._tcp.ForestDnsZones.swansea.acca. service locator 0 100 25601 s-dc.swansea.acca.
s-dc.swansea.acca. has address 20.0.0.1
s-dc.swansea.acca. has address 192.168.1.1
s-dc.swansea.acca. has address 10.0.2.15
s-dc.swansea.acca. has IPv6 address fd17:625c:f037:0002:cfd0:7c37:27cc:03d7
secret.swansea.acca. has address 192.168.1.1

An echo service is running on the remote host.

The remote host is running the 'echo' service. This service echoes any data which is sent to it.

This service is unused these days, so it is strongly advised that you disable it, as it may be used by attackers to set up denial of services attacks against this host.

Below are some examples of how to disable the echo service on some common platforms, however many services can exhibit this behavior and the list below is not exhaustive.

Consult vendor documentation for the service exhibiting the echo behavior for more information.

- Under Unix systems, comment out the 'echo' line in /etc/inetd.conf and restart the inetd process.

- Under Ubuntu systems, comment out the 'echo' line in /etc/systemd/system.conf and retart the systemd service.

- Under Windows systems, set the following registry key to 0 :
HKLM\System\CurrentControlSet\Services\SimpTCP\Parameters\EnableTcpEcho HKLM\System\CurrentControlSet\Services\SimpTCP\Parameters\EnableUdpEcho

Then launch cmd.exe and type :

net stop simptcp net start simptcp

To restart the service.

Medium

6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)

3.6

0.4809

5.0 (CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P)

Published: 1999/06/22, Modified: 2020/06/12

An echo service is running on the remote host.

The remote host is running the 'echo' service. This service echoes any data which is sent to it.

This service is unused these days, so it is strongly advised that you disable it, as it may be used by attackers to set up denial of services attacks against this host.

Below are some examples of how to disable the echo service on some common platforms, however many services can exhibit this behavior and the list below is not exhaustive.

Consult vendor documentation for the service exhibiting the echo behavior for more information.

- Under Unix systems, comment out the 'echo' line in /etc/inetd.conf and restart the inetd process.

- Under Ubuntu systems, comment out the 'echo' line in /etc/systemd/system.conf and retart the systemd service.

- Under Windows systems, set the following registry key to 0 :
HKLM\System\CurrentControlSet\Services\SimpTCP\Parameters\EnableTcpEcho HKLM\System\CurrentControlSet\Services\SimpTCP\Parameters\EnableUdpEcho

Then launch cmd.exe and type :

net stop simptcp net start simptcp

To restart the service.

Medium

6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)

3.6

0.4809

5.0 (CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P)

Published: 1999/06/22, Modified: 2020/06/12

A web browser installed on the remote Windows host is affected by a vulnerability.

The version of Google Chrome installed on the remote Windows host is prior to 141.0.7390.122. It is, therefore, affected by a vulnerability as referenced in the 2025_10_stable-channel-update-for-desktop_21 advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Upgrade to Google Chrome version 141.0.7390.122 or later.

Medium

I

Published: 2025/10/21, Modified: 2025/11/24

Path : C:\Program Files\Google\Chrome\Application
Installed version : 140.0.7339.208
Fixed version : 141.0.7390.122/.123

A web browser installed on the remote Windows host is affected by a vulnerability.

The version of Google Chrome installed on the remote Windows host is prior to 142.0.7444.162. It is, therefore, affected by a vulnerability as referenced in the 2025_11_stable-channel-update-for-desktop_11 advisory.

- Inappropriate implementation in V8 in Google Chrome prior to 142.0.7444.166 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2025-13042)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Upgrade to Google Chrome version 142.0.7444.162 or later.

Medium

8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)

7.7 (CVSS:3.0/E:U/RL:O/RC:C)

0.0007

6.8 (CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P)

5.0 (CVSS2#E:U/RL:OF/RC:C)

I

Published: 2025/11/12, Modified: 2025/11/20

Path : C:\Program Files\Google\Chrome\Application
Installed version : 140.0.7339.208
Fixed version : 142.0.7444.162/.163

A web browser installed on the remote Windows host is affected by a vulnerability.

The version of Google Chrome installed on the remote Windows host is prior to 143.0.7499.192. It is, therefore, affected by a vulnerability as referenced in the 2026_01_stable-channel-update-for-desktop advisory.

- Insufficient policy enforcement in WebView tag. (CVE-2026-0628)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Upgrade to Google Chrome version 143.0.7499.192 or later.

Medium

8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)

7.7 (CVSS:3.0/E:U/RL:O/RC:C)

0.0001

6.8 (CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P)

5.0 (CVSS2#E:U/RL:OF/RC:C)

I

Published: 2026/01/06, Modified: 2026/01/09

Path : C:\Program Files\Google\Chrome\Application
Installed version : 140.0.7339.208
Fixed version : 143.0.7499.192/.193

The quote service (qotd) is running on this host.

A server listens for TCP connections on TCP port 17. Once a connection is established a short message is sent out the connection (and any data received is thrown away). The service closes the connection after sending the quote.

Another quote of the day service is defined as a datagram based application on UDP. A server listens for UDP datagrams on UDP port 17.
When a datagram is received, an answering datagram is sent containing a quote (the data in the received datagram is ignored).

An easy attack is 'pingpong' which IP spoofs a packet between two machines running qotd. This will cause them to spew characters at each other, slowing the machines down and saturating the network.

- Under Unix systems, comment out the 'qotd' line in /etc/inetd.conf and restart the inetd process
- Under Windows systems, set the following registry keys to 0 :
HKLM\System\CurrentControlSet\Services\SimpTCP\Parameters\EnableTcpQotd HKLM\System\CurrentControlSet\Services\SimpTCP\Parameters\EnableUdpQotd Then launch cmd.exe and type :

net stop simptcp net start simptcp To restart the service.

Medium

6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)

3.6

0.4809

5.0 (CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P)

Published: 1999/11/30, Modified: 2019/10/04

The quote service (qotd) is running on this host.

A server listens for TCP connections on TCP port 17. Once a connection is established a short message is sent out the connection (and any data received is thrown away). The service closes the connection after sending the quote.

Another quote of the day service is defined as a datagram based application on UDP. A server listens for UDP datagrams on UDP port 17.
When a datagram is received, an answering datagram is sent containing a quote (the data in the received datagram is ignored).

An easy attack is 'pingpong' which IP spoofs a packet between two machines running qotd. This will cause them to spew characters at each other, slowing the machines down and saturating the network.

- Under Unix systems, comment out the 'qotd' line in /etc/inetd.conf and restart the inetd process
- Under Windows systems, set the following registry keys to 0 :
HKLM\System\CurrentControlSet\Services\SimpTCP\Parameters\EnableTcpQotd HKLM\System\CurrentControlSet\Services\SimpTCP\Parameters\EnableUdpQotd Then launch cmd.exe and type :

net stop simptcp net start simptcp To restart the service.

Medium

6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)

3.6

0.4809

5.0 (CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P)

Published: 1999/11/30, Modified: 2019/10/04

The SSL certificate for this service cannot be trusted.

The server's X.509 certificate cannot be trusted. This situation can occur in three different ways, in which the chain of trust can be broken, as stated below :

- First, the top of the certificate chain sent by the server might not be descended from a known public certificate authority. This can occur either when the top of the chain is an unrecognized, self-signed certificate, or when intermediate certificates are missing that would connect the top of the certificate chain to a known public certificate authority.

- Second, the certificate chain may contain a certificate that is not valid at the time of the scan. This can occur either when the scan occurs before one of the certificate's 'notBefore' dates, or after one of the certificate's 'notAfter' dates.

- Third, the certificate chain may contain a signature that either didn't match the certificate's information or could not be verified. Bad signatures can be fixed by getting the certificate with the bad signature to be re-signed by its issuer. Signatures that could not be verified are the result of the certificate's issuer using a signing algorithm that Nessus either does not support or does not recognize.

If the remote host is a public host in production, any break in the chain makes it more difficult for users to verify the authenticity and identity of the web server. This could make it easier to carry out man-in-the-middle attacks against the remote host.

Purchase or generate a proper SSL certificate for this service.

Medium

6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)

6.4 (CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:N)

Published: 2010/12/15, Modified: 2025/06/16

The following certificate was at the top of the certificate
chain sent by the remote host, but it is signed by an unknown
certificate authority :

|-Subject : O=Nessus Users United/OU=Nessus Server/L=New York/C=US/ST=NY/CN=S-DC
|-Issuer : O=Nessus Users United/OU=Nessus Certification Authority/L=New York/C=US/ST=NY/CN=Nessus Certification Authority

The remote service supports the use of medium strength SSL ciphers.

The remote host supports the use of SSL ciphers that offer medium strength encryption. Nessus regards medium strength as any encryption that uses key lengths at least 64 bits and less than 112 bits, or else that uses the 3DES encryption suite.

Note that it is considerably easier to circumvent medium strength encryption if the attacker is on the same physical network.

Reconfigure the affected application if possible to avoid use of medium strength ciphers.

Medium

7.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)

6.1

0.4002

5.0 (CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N)

Published: 2009/11/23, Modified: 2025/02/12

Medium Strength Ciphers (> 64-bit and < 112-bit key, or 3DES)

Name Code KEX Auth Encryption MAC
---------------------- ---------- --- ---- --------------------- ---
DES-CBC3-SHA 0x00, 0x0A RSA RSA 3DES-CBC(168) SHA1

The fields above are :

{Tenable ciphername}
{Cipher ID code}
Kex={key exchange}
Auth={authentication}
Encrypt={symmetric encryption method}
MAC={message authentication code}
{export flag}

The remote service encrypts traffic using an older version of TLS.

The remote service accepts connections encrypted using TLS 1.0. TLS 1.0 has a number of cryptographic design flaws. Modern implementations of TLS 1.0 mitigate these problems, but newer versions of TLS like 1.2 and 1.3 are designed against these flaws and should be used whenever possible.

As of March 31, 2020, Endpoints that aren’t enabled for TLS 1.2 and higher will no longer function properly with major web browsers and major vendors.

PCI DSS v3.2 requires that TLS 1.0 be disabled entirely by June 30, 2018, except for POS POI terminals (and the SSL/TLS termination points to which they connect) that can be verified as not being susceptible to any known exploits.

Enable support for TLS 1.2 and 1.3, and disable support for TLS 1.0.

Medium

6.5 (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N)

6.1 (CVSS2#AV:N/AC:H/Au:N/C:C/I:P/A:N)

Published: 2017/11/22, Modified: 2023/04/19

TLSv1 is enabled and the server supports at least one cipher.

The remote service encrypts traffic using an older version of TLS.

The remote service accepts connections encrypted using TLS 1.1. TLS 1.1 lacks support for current and recommended cipher suites. Ciphers that support encryption before MAC computation, and authenticated encryption modes such as GCM cannot be used with TLS 1.1

As of March 31, 2020, Endpoints that are not enabled for TLS 1.2 and higher will no longer function properly with major web browsers and major vendors.

Enable support for TLS 1.2 and/or 1.3, and disable support for TLS 1.1.

Medium

6.5 (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N)