Nessus Report

Report generated by Tenable Nessus™

ClientS1 - Basic Scan

Sat, 10 Jan 2026 23:16:06 GMT Standard Time

TABLE OF CONTENTS
Vulnerabilities by HostExpand All | Collapse All
192.168.1.10
152
37
59
3
0
Critical
High
Medium
Low
Info
Scan Information
Start time: Sat Jan 10 22:30:58 2026
End time: Sat Jan 10 23:16:06 2026
Host Information
Netbios Name: CLIENTS1
IP: 192.168.1.10
MAC Address: 08:00:27:6D:CF:F8
OS: Microsoft Windows 10 Enterprise Evaluation Build 19045
Vulnerabilities

167115 - KB5019959: Windows 10 Version 20H2 / 21H1 / 21H2 / 22H2 Security Update (November 2022)
-
Synopsis
The remote Windows host is affected by multiple vulnerabilities.
Description
The remote Windows host is missing security update 5019959. It is, therefore, affected by multiple vulnerabilities

- AMD: CVE-2022-23824 IBPB and Return Address Predictor Interactions (CVE-2022-23824)

- Windows Group Policy Elevation of Privilege Vulnerability (CVE-2022-37992, CVE-2022-41086)

- Windows Hyper-V Denial of Service Vulnerability (CVE-2022-38015)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Apply Security Update 5019959
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
8.4 (CVSS:3.0/E:H/RL:O/RC:C)
EPSS Score
0.3924
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
8.7 (CVSS2#E:H/RL:OF/RC:C)
STIG Severity
I
References
Plugin Information
Published: 2022/11/08, Modified: 2025/10/22
Plugin Output

tcp/445/cifs


The remote host is missing one of the following rollup KBs :
- 5019959

- C:\Windows\system32\ntoskrnl.exe has not been patched.
Remote version : 10.0.19041.2006
Should be : 10.0.19041.2251
169787 - KB5022282: Windows 10 Version 20H2 / Windows 10 Version 21H2 / Windows 10 Version 22H2 Security Update (January 2023)
-
Synopsis
The remote Windows host is affected by multiple vulnerabilities.
Description
The remote Windows host is missing security update 5022282. It is, therefore, affected by multiple vulnerabilities

- Microsoft ODBC Driver Remote Code Execution Vulnerability (CVE-2023-21732)

- Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2023-21681)

- Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability (CVE-2023-21676)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Apply Security Update 5022282
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
8.4 (CVSS:3.0/E:H/RL:O/RC:C)
EPSS Score
0.5296
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
8.7 (CVSS2#E:H/RL:OF/RC:C)
STIG Severity
I
References
Exploitable With
Core Impact (true)
Plugin Information
Published: 2023/01/10, Modified: 2024/06/17
Plugin Output

tcp/445/cifs


The remote host is missing one of the following rollup KBs :
- 5022282

- C:\Windows\system32\ntoskrnl.exe has not been patched.
Remote version : 10.0.19041.2006
Should be : 10.0.19041.2486
171445 - KB5022834: Windows 10 Version 20H2 / Windows 10 Version 21H2 / Windows 10 Version 22H2 Security Update (February 2023)
-
Synopsis
The remote Windows host is affected by multiple vulnerabilities.
Description
The remote Windows host is missing security update 5022834. It is, therefore, affected by multiple vulnerabilities

- Windows iSCSI Discovery Service Remote Code Execution Vulnerability (CVE-2023-21803)

- Microsoft PostScript Printer Driver Remote Code Execution Vulnerability (CVE-2023-21684, CVE-2023-21801)

- Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2023-21685, CVE-2023-21686, CVE-2023-21799)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Apply Security Update 5022834
Risk Factor
Critical
CVSS v3.0 Base Score
9.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
9.4 (CVSS:3.0/E:H/RL:O/RC:C)
EPSS Score
0.3497
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
8.7 (CVSS2#E:H/RL:OF/RC:C)
STIG Severity
I
References
Plugin Information
Published: 2023/02/14, Modified: 2024/06/17
Plugin Output

tcp/445/cifs


The remote host is missing one of the following rollup KBs :
- 5022834

- C:\Windows\system32\ntoskrnl.exe has not been patched.
Remote version : 10.0.19041.2006
Should be : 10.0.19041.2604
172521 - KB5023696: Windows 10 Version 20H2 / Windows 10 Version 21H2 / Windows 10 Version 22H2 Security Update (March 2023)
-
Synopsis
The remote Windows host is affected by multiple vulnerabilities.
Description
The remote Windows host is missing security update 5023696. It is, therefore, affected by multiple vulnerabilities

- An out-of-bounds write vulnerability exists in TPM2.0's Module Library allowing writing of a 2-byte data past the end of TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can lead to denial of service (crashing the TPM chip/process or rendering it unusable) and/or arbitrary code execution in the TPM context. (CVE-2023-1017)

- An out-of-bounds read vulnerability exists in TPM2.0's Module Library allowing a 2-byte read past the end of a TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can read or access sensitive data stored in the TPM. (CVE-2023-1018)

- Remote Procedure Call Runtime Remote Code Execution Vulnerability (CVE-2023-21708, CVE-2023-23405, CVE-2023-24869, CVE-2023-24908)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Apply Security Update 5023696
Risk Factor
Critical
CVSS v3.0 Base Score
9.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
9.4 (CVSS:3.0/E:H/RL:O/RC:C)
EPSS Score
0.7729
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
8.7 (CVSS2#E:H/RL:OF/RC:C)
STIG Severity
I
References
Plugin Information
Published: 2023/03/14, Modified: 2024/06/17
Plugin Output

tcp/445/cifs


The remote host is missing one of the following rollup KBs :
- 5023696

- C:\Windows\system32\ntoskrnl.exe has not been patched.
Remote version : 10.0.19041.2006
Should be : 10.0.19041.2728
174107 - KB5025221: Windows 10 Version 20H2 / Windows 10 Version 21H2 / Windows 10 Version 22H2 Security Update (April 2023)
-
Synopsis
The remote Windows host is affected by multiple vulnerabilities.
Description
The remote Windows host is missing security update 5025221. It is, therefore, affected by multiple vulnerabilities

- Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2023-28275)

- Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability (CVE-2023-28250)

- Microsoft Message Queuing Remote Code Execution Vulnerability (CVE-2023-21554)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Apply Security Update 5025221
Risk Factor
Critical
CVSS v3.0 Base Score
9.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
9.4 (CVSS:3.0/E:H/RL:O/RC:C)
EPSS Score
0.9216
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
8.7 (CVSS2#E:H/RL:OF/RC:C)
STIG Severity
I
References
Exploitable With
Core Impact (true) Metasploit (true)
Plugin Information
Published: 2023/04/11, Modified: 2024/06/17
Plugin Output

tcp/445/cifs


The remote host is missing one of the following rollup KBs :
- 5025221

- C:\Windows\system32\ntoskrnl.exe has not been patched.
Remote version : 10.0.19041.2006
Should be : 10.0.19041.2846
175340 - KB5026361: Windows 10 Version 20H2 / Windows 10 Version 21H2 / Windows 10 Version 22H2 Security Update (May 2023)
-
Synopsis
The remote Windows host is affected by multiple vulnerabilities.
Description
The remote Windows host is missing security update 5026361. It is, therefore, affected by multiple vulnerabilities

- Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability (CVE-2023-24943)

- Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability (CVE-2023-28283)

- Server for NFS Denial of Service Vulnerability (CVE-2023-24939)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Apply Security Update 5026361
Risk Factor
Critical
CVSS v3.0 Base Score
9.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
9.1 (CVSS:3.0/E:F/RL:O/RC:C)
EPSS Score
0.2384
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
8.3 (CVSS2#E:F/RL:OF/RC:C)
STIG Severity
I
References
Plugin Information
Published: 2023/05/09, Modified: 2024/06/17
Plugin Output

tcp/445/cifs


The remote host is missing one of the following rollup KBs :
- 5026361

- C:\Windows\system32\ntoskrnl.exe has not been patched.
Remote version : 10.0.19041.2006
Should be : 10.0.19041.2965
177252 - KB5027215: Windows 10 Version 21H2 / Windows 10 Version 22H2 Security Update (June 2023)
-
Synopsis
The remote Windows host is affected by multiple vulnerabilities.
Description
The remote Windows host is missing security update 5027215. It is, therefore, affected by multiple vulnerabilities

- Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability (CVE-2023-29363, CVE-2023-32014, CVE-2023-32015)

- Windows Collaborative Translation Framework Elevation of Privilege Vulnerability (CVE-2023-32009)

- Microsoft ODBC Driver Remote Code Execution Vulnerability (CVE-2023-29373)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Apply Security Update 5027215
Risk Factor
Critical
CVSS v3.0 Base Score
9.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
9.4 (CVSS:3.0/E:H/RL:O/RC:C)
EPSS Score
0.2211
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
8.7 (CVSS2#E:H/RL:OF/RC:C)
STIG Severity
I
References
Exploitable With
Core Impact (true)
Plugin Information
Published: 2023/06/13, Modified: 2024/06/17
Plugin Output

tcp/445/cifs


The remote host is missing one of the following rollup KBs :
- 5027215

- C:\Windows\system32\ntoskrnl.exe has not been patched.
Remote version : 10.0.19041.2006
Should be : 10.0.19041.3086
178159 - KB5028166: Windows 10 Version 21H2 / Windows 10 Version 22H2 Security Update (July 2023)
-
Synopsis
The remote Windows host is affected by multiple vulnerabilities.
Description
The remote Windows host is missing security update 5028166. It is, therefore, affected by multiple vulnerabilities

- Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability (CVE-2023-35365, CVE-2023-35366, CVE-2023-35367)

- Windows Netlogon Information Disclosure Vulnerability (CVE-2023-21526)

- Windows Win32k Elevation of Privilege Vulnerability (CVE-2023-21756)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Apply Security Update 5028166
Risk Factor
Critical
CVSS v3.0 Base Score
9.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
9.4 (CVSS:3.0/E:H/RL:O/RC:C)
EPSS Score
0.6873
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
8.7 (CVSS2#E:H/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2023-21526
CVE CVE-2023-21756
CVE CVE-2023-32034
CVE CVE-2023-32035
CVE CVE-2023-32037
CVE CVE-2023-32038
CVE CVE-2023-32039
CVE CVE-2023-32040
CVE CVE-2023-32041
CVE CVE-2023-32042
CVE CVE-2023-32043
CVE CVE-2023-32044
CVE CVE-2023-32045
CVE CVE-2023-32046
CVE CVE-2023-32049
CVE CVE-2023-32053
CVE CVE-2023-32054
CVE CVE-2023-32055
CVE CVE-2023-32056
CVE CVE-2023-32057
CVE CVE-2023-32085
CVE CVE-2023-33154
CVE CVE-2023-33155
CVE CVE-2023-33164
CVE CVE-2023-33166
CVE CVE-2023-33167
CVE CVE-2023-33168
CVE CVE-2023-33169
CVE CVE-2023-33172
CVE CVE-2023-33173
CVE CVE-2023-33174
CVE CVE-2023-35296
CVE CVE-2023-35297
CVE CVE-2023-35299
CVE CVE-2023-35300
CVE CVE-2023-35302
CVE CVE-2023-35303
CVE CVE-2023-35304
CVE CVE-2023-35305
CVE CVE-2023-35306
CVE CVE-2023-35308
CVE CVE-2023-35309
CVE CVE-2023-35312
CVE CVE-2023-35313
CVE CVE-2023-35314
CVE CVE-2023-35315
CVE CVE-2023-35316
CVE CVE-2023-35318
CVE CVE-2023-35319
CVE CVE-2023-35320
CVE CVE-2023-35324
CVE CVE-2023-35325
CVE CVE-2023-35326
CVE CVE-2023-35328
CVE CVE-2023-35329
CVE CVE-2023-35330
CVE CVE-2023-35332
CVE CVE-2023-35336
CVE CVE-2023-35337
CVE CVE-2023-35338
CVE CVE-2023-35339
CVE CVE-2023-35340
CVE CVE-2023-35341
CVE CVE-2023-35342
CVE CVE-2023-35343
CVE CVE-2023-35347
CVE CVE-2023-35353
CVE CVE-2023-35356
CVE CVE-2023-35357
CVE CVE-2023-35358
CVE CVE-2023-35360
CVE CVE-2023-35361
CVE CVE-2023-35362
CVE CVE-2023-35363
CVE CVE-2023-35364
CVE CVE-2023-35365
CVE CVE-2023-35366
CVE CVE-2023-35367
CVE CVE-2023-36871
CVE CVE-2023-36874
MSKB 5028166
XREF CISA-KNOWN-EXPLOITED:2023/08/01
XREF MSFT:MS23-5028166
XREF IAVA:2023-A-0347-S
XREF IAVA:2023-A-0345-S
Exploitable With
Core Impact (true) Metasploit (true)
Plugin Information
Published: 2023/07/11, Modified: 2024/06/17
Plugin Output

tcp/445/cifs


The remote host is missing one of the following rollup KBs :
- 5028166

- C:\Windows\system32\ntoskrnl.exe has not been patched.
Remote version : 10.0.19041.2006
Should be : 10.0.19041.3208
179497 - KB5029244: Windows 10 Version 21H2 / Windows 10 Version 22H2 Security Update (August 2023)
-
Synopsis
The remote Windows host is affected by multiple vulnerabilities.
Description
The remote Windows host is missing security update 5029244. It is, therefore, affected by multiple vulnerabilities

- Microsoft Message Queuing Remote Code Execution Vulnerability (CVE-2023-35385, CVE-2023-36910, CVE-2023-36911)

- Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2023-36882)

- Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability (CVE-2023-35387)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Apply Security Update 5029244
Risk Factor
Critical
CVSS v3.0 Base Score
9.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
9.4 (CVSS:3.0/E:H/RL:O/RC:C)
EPSS Score
0.9322
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
8.7 (CVSS2#E:H/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2023-20569
CVE CVE-2023-35359
CVE CVE-2023-35376
CVE CVE-2023-35377
CVE CVE-2023-35378
CVE CVE-2023-35380
CVE CVE-2023-35381
CVE CVE-2023-35382
CVE CVE-2023-35383
CVE CVE-2023-35384
CVE CVE-2023-35385
CVE CVE-2023-35386
CVE CVE-2023-35387
CVE CVE-2023-36882
CVE CVE-2023-36884
CVE CVE-2023-36889
CVE CVE-2023-36900
CVE CVE-2023-36903
CVE CVE-2023-36904
CVE CVE-2023-36905
CVE CVE-2023-36906
CVE CVE-2023-36907
CVE CVE-2023-36908
CVE CVE-2023-36909
CVE CVE-2023-36910
CVE CVE-2023-36911
CVE CVE-2023-36912
CVE CVE-2023-36913
CVE CVE-2023-36914
CVE CVE-2023-38172
CVE CVE-2023-38184
CVE CVE-2023-38186
CVE CVE-2023-38254
MSKB 5029244
XREF MSFT:MS23-5029244
XREF IAVA:2023-A-0418-S
XREF IAVA:2023-A-0409-S
XREF IAVA:2023-A-0402-S
XREF IAVA:2023-A-0412-S
XREF IAVA:2023-A-0416-S
XREF CISA-KNOWN-EXPLOITED:2023/08/29
Exploitable With
Core Impact (true)
Plugin Information
Published: 2023/08/08, Modified: 2024/11/13
Plugin Output

tcp/445/cifs


The remote host is missing one of the following rollup KBs :
- 5029244

- C:\Windows\system32\ntoskrnl.exe has not been patched.
Remote version : 10.0.19041.2006
Should be : 10.0.19041.3324
182854 - KB5031356: Windows 10 Version 21H2 / Windows 10 Version 22H2 Security Update (October 2023)
-
Synopsis
The remote Windows host is affected by multiple vulnerabilities.
Description
The remote Windows host is missing security update 5031356. It is, therefore, affected by multiple vulnerabilities

- The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023. (CVE-2023-44487)
- Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2023-36577)

- Windows IIS Server Elevation of Privilege Vulnerability (CVE-2023-36434)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Apply Security Update 5031356
Risk Factor
Critical
CVSS v3.0 Base Score
9.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
9.4 (CVSS:3.0/E:H/RL:O/RC:C)
EPSS Score
0.9442
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
8.7 (CVSS2#E:H/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2023-35349
CVE CVE-2023-36431
CVE CVE-2023-36434
CVE CVE-2023-36436
CVE CVE-2023-36438
CVE CVE-2023-36557
CVE CVE-2023-36563
CVE CVE-2023-36564
CVE CVE-2023-36567
CVE CVE-2023-36570
CVE CVE-2023-36571
CVE CVE-2023-36572
CVE CVE-2023-36573
CVE CVE-2023-36574
CVE CVE-2023-36575
CVE CVE-2023-36576
CVE CVE-2023-36577
CVE CVE-2023-36578
CVE CVE-2023-36579
CVE CVE-2023-36581
CVE CVE-2023-36582
CVE CVE-2023-36583
CVE CVE-2023-36584
CVE CVE-2023-36585
CVE CVE-2023-36589
CVE CVE-2023-36590
CVE CVE-2023-36591
CVE CVE-2023-36592
CVE CVE-2023-36593
CVE CVE-2023-36594
CVE CVE-2023-36596
CVE CVE-2023-36598
CVE CVE-2023-36602
CVE CVE-2023-36603
CVE CVE-2023-36605
CVE CVE-2023-36606
CVE CVE-2023-36697
CVE CVE-2023-36698
CVE CVE-2023-36701
CVE CVE-2023-36702
CVE CVE-2023-36709
CVE CVE-2023-36710
CVE CVE-2023-36711
CVE CVE-2023-36712
CVE CVE-2023-36713
CVE CVE-2023-36717
CVE CVE-2023-36718
CVE CVE-2023-36720
CVE CVE-2023-36721
CVE CVE-2023-36722
CVE CVE-2023-36723
CVE CVE-2023-36724
CVE CVE-2023-36725
CVE CVE-2023-36726
CVE CVE-2023-36729
CVE CVE-2023-36731
CVE CVE-2023-36732
CVE CVE-2023-36743
CVE CVE-2023-36776
CVE CVE-2023-36902
CVE CVE-2023-38159
CVE CVE-2023-38166
CVE CVE-2023-41765
CVE CVE-2023-41766
CVE CVE-2023-41767
CVE CVE-2023-41768
CVE CVE-2023-41769
CVE CVE-2023-41770
CVE CVE-2023-41771
CVE CVE-2023-41772
CVE CVE-2023-41773
CVE CVE-2023-41774
CVE CVE-2023-44487
MSKB 5031356
XREF MSFT:MS23-5031356
XREF IAVA:2023-A-0552-S
XREF IAVA:2023-A-0553-S
XREF CISA-KNOWN-EXPLOITED:2023/12/07
XREF CISA-KNOWN-EXPLOITED:2023/10/31
XREF CEA-ID:CEA-2024-0004
XREF IAVB:2023-B-0083-S
Exploitable With
Core Impact (true)
Plugin Information
Published: 2023/10/10, Modified: 2024/06/17
Plugin Output

tcp/445/cifs


The remote host is missing one of the following rollup KBs :
- 5031356

- C:\Windows\system32\ntoskrnl.exe has not been patched.
Remote version : 10.0.19041.2006
Should be : 10.0.19041.3570
185585 - KB5032189: Windows 10 Version 21H2 / Windows 10 Version 22H2 Security Update (November 2023)
-
Synopsis
The remote Windows host is affected by multiple vulnerabilities.
Description
The remote Windows host is missing security update 5032189. It is, therefore, affected by multiple vulnerabilities

- Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2023-36402)

- Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability (CVE-2023-36397)

- Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability (CVE-2023-36028)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Apply Security Update 5032189
Risk Factor
Critical
CVSS v3.0 Base Score
9.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
9.4 (CVSS:3.0/E:H/RL:O/RC:C)
EPSS Score
0.9021
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
8.7 (CVSS2#E:H/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2023-24023
CVE CVE-2023-36017
CVE CVE-2023-36025
CVE CVE-2023-36028
CVE CVE-2023-36033
CVE CVE-2023-36036
CVE CVE-2023-36047
CVE CVE-2023-36393
CVE CVE-2023-36394
CVE CVE-2023-36397
CVE CVE-2023-36398
CVE CVE-2023-36400
CVE CVE-2023-36401
CVE CVE-2023-36402
CVE CVE-2023-36403
CVE CVE-2023-36404
CVE CVE-2023-36405
CVE CVE-2023-36408
CVE CVE-2023-36423
CVE CVE-2023-36424
CVE CVE-2023-36425
CVE CVE-2023-36427
CVE CVE-2023-36428
CVE CVE-2023-36705
CVE CVE-2023-36719
CVE CVE-2023-38039
CVE CVE-2023-38545
CVE CVE-2024-21315
MSKB 5032189
XREF MSFT:MS23-5032189
XREF CISA-KNOWN-EXPLOITED:2023/12/05
XREF CEA-ID:CEA-2023-0052
XREF IAVA:2023-A-0638-S
XREF IAVA:2023-A-0636-S
XREF IAVA:2024-A-0105
Exploitable With
Core Impact (true)
Plugin Information
Published: 2023/11/14, Modified: 2024/06/17
Plugin Output

tcp/445/cifs


The remote host is missing one of the following rollup KBs :
- 5032189

- C:\Windows\system32\ntoskrnl.exe has not been patched.
Remote version : 10.0.19041.2006
Should be : 10.0.19041.3693
186787 - KB5033372: Windows 10 Version 21H2 / Windows 10 Version 22H2 Security Update (December 2023)
-
Synopsis
The remote Windows host is affected by multiple vulnerabilities.
Description
The remote Windows host is missing security update 5033372. It is, therefore, affected by multiple vulnerabilities

- Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2023-36006)

- Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability (CVE-2023-36696)

- Win32k Elevation of Privilege Vulnerability (CVE-2023-36011)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Apply Security Update 5033372
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
8.2 (CVSS:3.0/E:F/RL:O/RC:C)
EPSS Score
0.3857
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
8.3 (CVSS2#E:F/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2023-20588
CVE CVE-2023-21740
CVE CVE-2023-35628
CVE CVE-2023-35630
CVE CVE-2023-35632
CVE CVE-2023-35639
CVE CVE-2023-35641
CVE CVE-2023-35642
CVE CVE-2023-35644
CVE CVE-2023-36003
CVE CVE-2023-36004
CVE CVE-2023-36005
CVE CVE-2023-36006
CVE CVE-2023-36011
CVE CVE-2023-36696
MSKB 5033372
XREF MSFT:MS23-5033372
XREF IAVA:2023-A-0689-S
XREF IAVA:2023-A-0690-S
Exploitable With
Core Impact (true)
Plugin Information
Published: 2023/12/12, Modified: 2025/10/31
Plugin Output

tcp/445/cifs


The remote host is missing one of the following rollup KBs :
- 5033372

- C:\Windows\system32\ntoskrnl.exe has not been patched.
Remote version : 10.0.19041.2006
Should be : 10.0.19041.3803
187795 - KB5034122: Windows 10 Version 21H2 / Windows 10 Version 22H2 Security Update (January 2024)
-
Synopsis
The remote Windows host is affected by multiple vulnerabilities.
Description
The remote Windows host is missing security update 5034122. It is, therefore, affected by multiple vulnerabilities

- Microsoft ODBC Driver Remote Code Execution Vulnerability (CVE-2024-20654)

- BitLocker Security Feature Bypass Vulnerability (CVE-2024-20666)

- Windows Kerberos Security Feature Bypass Vulnerability (CVE-2024-20674)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Apply Security Update 5034122
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.9 (CVSS:3.0/E:P/RL:O/RC:C)
EPSS Score
0.5194
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.8 (CVSS2#E:POC/RL:OF/RC:C)
STIG Severity
I
References
Plugin Information
Published: 2024/01/09, Modified: 2024/06/17
Plugin Output

tcp/445/cifs


The remote host is missing one of the following rollup KBs :
- 5034122

- C:\Windows\system32\ntoskrnl.exe has not been patched.
Remote version : 10.0.19041.2006
Should be : 10.0.19041.3930
190468 - KB5034763: Windows 10 Version 21H2 / Windows 10 Version 22H2 Security Update (February 2024)
-
Synopsis
The remote Windows host is affected by multiple vulnerabilities.
Description
The remote Windows host is missing security update 5034763. It is, therefore, affected by multiple vulnerabilities

- Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2024-21350, CVE-2024-21352, CVE-2024-21358, CVE-2024-21359, CVE-2024-21360, CVE-2024-21361, CVE-2024-21365, CVE-2024-21366, CVE-2024-21367, CVE-2024-21368, CVE-2024-21369, CVE-2024-21370, CVE-2024-21375, CVE-2024-21391, CVE-2024-21420)

- Windows Kernel Elevation of Privilege Vulnerability (CVE-2024-21338, CVE-2024-21371)

- Windows Kernel Information Disclosure Vulnerability (CVE-2024-21340)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Apply Security Update 5034763
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
8.4 (CVSS:3.0/E:H/RL:O/RC:C)
EPSS Score
0.9377
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
8.7 (CVSS2#E:H/RL:OF/RC:C)
STIG Severity
I
References
Exploitable With
Core Impact (true)
Plugin Information
Published: 2024/02/13, Modified: 2025/10/09
Plugin Output

tcp/445/cifs


The remote host is missing one of the following rollup KBs :
- 5034763

- C:\Windows\system32\ntoskrnl.exe has not been patched.
Remote version : 10.0.19041.2006
Should be : 10.0.19041.4046
191944 - KB5035845: Windows 10 Version 21H2 / Windows 10 Version 22H2 Security Update (March 2024)
-
Synopsis
The remote Windows host is affected by multiple vulnerabilities.
Description
The remote Windows host is missing security update 5035845. It is, therefore, affected by multiple vulnerabilities

- Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2024-21441, CVE-2024-21444, CVE-2024-21450, CVE-2024-26161, CVE-2024-26166)

- Windows USB Hub Driver Remote Code Execution Vulnerability (CVE-2024-21429)

- Windows USB Attached SCSI (UAS) Protocol Remote Code Execution Vulnerability (CVE-2024-21430)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Apply Security Update 5035845
Risk Factor
Critical
CVSS v3.0 Base Score
8.1 (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.7 (CVSS:3.0/E:H/RL:O/RC:C)
EPSS Score
0.3458
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
8.7 (CVSS2#E:H/RL:OF/RC:C)
STIG Severity
I
References
Exploitable With
Core Impact (true)
Plugin Information
Published: 2024/03/12, Modified: 2025/10/22
Plugin Output

tcp/445/cifs


The remote host is missing one of the following rollup KBs :
- 5035845

- C:\Windows\system32\ntoskrnl.exe has not been patched.
Remote version : 10.0.19041.2006
Should be : 10.0.19041.4170
193090 - KB5036892: Windows 10 Version 21H2 / Windows 10 Version 22H2 Security Update (April 2024)
-
Synopsis
The remote Windows host is affected by multiple vulnerabilities.
Description
The remote Windows host is missing security update 5036892. It is, therefore, affected by multiple vulnerabilities

- SmartScreen Prompt Security Feature Bypass Vulnerability (CVE-2024-29988)

- Secure Boot Security Feature Bypass Vulnerability (CVE-2024-20669, CVE-2024-26168, CVE-2024-26171, CVE-2024-26175, CVE-2024-26180, CVE-2024-26189, CVE-2024-26194, CVE-2024-26240, CVE-2024-26250, CVE-2024-28896, CVE-2024-28897, CVE-2024-28898, CVE-2024-28903, CVE-2024-28919, CVE-2024-28920, CVE-2024-28921, CVE-2024-28922, CVE-2024-28923, CVE-2024-28924, CVE-2024-28925, CVE-2024-29061, CVE-2024-29062)

- Windows rndismp6.sys Remote Code Execution Vulnerability (CVE-2024-26252, CVE-2024-26253)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Apply Security Update 5036892
Risk Factor
Critical
CVSS v3.0 Base Score
7.8 (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.5 (CVSS:3.0/E:H/RL:O/RC:C)
EPSS Score
0.8317
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
8.7 (CVSS2#E:H/RL:OF/RC:C)
STIG Severity
I
References
Exploitable With
Core Impact (true)
Plugin Information
Published: 2024/04/09, Modified: 2025/10/06
Plugin Output

tcp/445/cifs


The remote host is missing one of the following rollup KBs :
- 5036892

- C:\Windows\system32\ntoskrnl.exe has not been patched.
Remote version : 10.0.19041.2006
Should be : 10.0.19041.4291
197014 - KB5037768: Windows 10 Version 21H2 / Windows 10 Version 22H2 Security Update (May 2024)
-
Synopsis
The remote Windows host is affected by multiple vulnerabilities.
Description
The remote Windows host is missing security update 5037768. It is, therefore, affected by multiple vulnerabilities

- Windows MSHTML Platform Security Feature Bypass Vulnerability (CVE-2024-30040)

- Windows Common Log File System Driver Elevation of Privilege Vulnerability (CVE-2024-29996, CVE-2024-30025, CVE-2024-30037)

- Windows Mobile Broadband Driver Remote Code Execution Vulnerability (CVE-2024-29997, CVE-2024-29998, CVE-2024-29999, CVE-2024-30000, CVE-2024-30001, CVE-2024-30002, CVE-2024-30003, CVE-2024-30004, CVE-2024-30005, CVE-2024-30012, CVE-2024-30021)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Apply Security Update 5037768
Risk Factor
Critical
CVSS v3.0 Base Score
7.8 (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.5 (CVSS:3.0/E:H/RL:O/RC:C)
EPSS Score
0.5388
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
8.7 (CVSS2#E:H/RL:OF/RC:C)
STIG Severity
I
References
Exploitable With
Core Impact (true) Metasploit (true)
Plugin Information
Published: 2024/05/14, Modified: 2025/10/06
Plugin Output

tcp/445/cifs


The remote host is missing one of the following rollup KBs :
- 5037768

- C:\Windows\system32\ntoskrnl.exe has not been patched.
Remote version : 10.0.19041.2006
Should be : 10.0.19041.4412
200343 - KB5039211: Windows 10 Version 21H2 / Windows 10 Version 22H2 Security Update (June 2024)
-
Synopsis
The remote Windows host is affected by multiple vulnerabilities.
Description
The remote Windows host is missing security update 5039211. It is, therefore, affected by multiple vulnerabilities

- Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability (CVE-2024-30097)

- Windows Remote Access Connection Manager Information Disclosure Vulnerability (CVE-2024-30069)

- Windows Container Manager Service Elevation of Privilege Vulnerability (CVE-2024-30076)

- Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability (CVE-2024-30080)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Apply Security Update 5039211
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
8.4 (CVSS:3.0/E:H/RL:O/RC:C)
EPSS Score
0.8897
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
8.7 (CVSS2#E:H/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2024-30063
CVE CVE-2024-30065
CVE CVE-2024-30066
CVE CVE-2024-30067
CVE CVE-2024-30068
CVE CVE-2024-30069
CVE CVE-2024-30076
CVE CVE-2024-30077
CVE CVE-2024-30078
CVE CVE-2024-30080
CVE CVE-2024-30082
CVE CVE-2024-30084
CVE CVE-2024-30085
CVE CVE-2024-30086
CVE CVE-2024-30087
CVE CVE-2024-30088
CVE CVE-2024-30089
CVE CVE-2024-30090
CVE CVE-2024-30091
CVE CVE-2024-30093
CVE CVE-2024-30094
CVE CVE-2024-30095
CVE CVE-2024-30096
CVE CVE-2024-30097
CVE CVE-2024-30099
CVE CVE-2024-35250
CVE CVE-2024-35265
CVE CVE-2024-38213
MSKB 5039211
XREF MSFT:MS24-5039211
XREF IAVA:2024-A-0343-S
XREF IAVA:2024-A-0345-S
XREF CISA-KNOWN-EXPLOITED:2025/01/06
XREF CISA-KNOWN-EXPLOITED:2024/11/05
XREF CISA-KNOWN-EXPLOITED:2024/09/03
Exploitable With
Core Impact (true) Metasploit (true)
Plugin Information
Published: 2024/06/11, Modified: 2025/10/06
Plugin Output

tcp/445/cifs


The remote host is missing one of the following rollup KBs :
- 5039211

- C:\Windows\system32\ntoskrnl.exe has not been patched.
Remote version : 10.0.19041.2006
Should be : 10.0.19041.4522
202037 - KB5040427: Windows 10 Version 21H2 / Windows 10 Version 22H2 Security Update (July 2024)
-
Synopsis
The remote Windows host is affected by multiple vulnerabilities.
Description
The remote Windows host is missing security update 5040427. It is, therefore, affected by multiple vulnerabilities

- RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen- prefix collision attack against MD5 Response Authenticator signature. (CVE-2024-3596)
- A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. (CVE-2024-30013, CVE-2024-38104)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Apply Security Update 5040427
Risk Factor
Critical
CVSS v3.0 Base Score
9.0 (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
8.6 (CVSS:3.0/E:H/RL:O/RC:C)
EPSS Score
0.9282
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
8.7 (CVSS2#E:H/RL:OF/RC:C)
STIG Severity
I
References
Exploitable With
Core Impact (true)
Plugin Information
Published: 2024/07/09, Modified: 2025/10/06
Plugin Output

tcp/445/cifs


The remote host is missing one of the following rollup KBs :
- 5040427

- C:\Windows\system32\ntoskrnl.exe has not been patched.
Remote version : 10.0.19041.2006
Should be : 10.0.19041.4648
205452 - KB5041580: Windows 10 Version 21H2 / Windows 10 Version 22H2 Security Update (August 2024)
-
Synopsis
The remote Windows host is affected by multiple vulnerabilities.
Description
The remote Windows host is missing security update 5041580. It is, therefore, affected by multiple vulnerabilities

- An elevation of privilege vulnerability exists in Windows based systems supporting Virtualization Based Security (VBS) including a subset of Azure Virtual Machine SKUS. This can allow an attacker with administrator privileges to replace current versions of Windows system files with outdated versions. By exploiting this vulnerability, an attacker could reintroduce previously mitigated vulnerabilities, circumvent some features of VBS, and exfiltrate data protected by VBS. (CVE-2024-21302)

- A buffer overflow was found in grub_font_construct_glyph(). A malicious crafted pf2 font can lead to an overflow when calculating the max_glyph_size value, allocating a smaller than needed buffer for the glyph, this further leads to a buffer overflow and a heap based out-of-bounds write. An attacker may use this vulnerability to circumvent the secure boot mechanism. (CVE-2022-2601)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Apply Security Update 5041580
Risk Factor
Critical
CVSS v3.0 Base Score
9.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
9.4 (CVSS:3.0/E:H/RL:O/RC:C)
EPSS Score
0.9006
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
8.7 (CVSS2#E:H/RL:OF/RC:C)
STIG Severity
I
References
Exploitable With
Core Impact (true)
Plugin Information
Published: 2024/08/13, Modified: 2025/10/06
Plugin Output

tcp/445/cifs


The remote host is missing one of the following rollup KBs :
- 5041580

- C:\Windows\system32\ntoskrnl.exe has not been patched.
Remote version : 10.0.19041.2006
Should be : 10.0.19041.4780
206894 - KB5043064: Windows 10 Version 21H2 / Windows 10 Version 22H2 Security Update (September 2024)
-
Synopsis
The remote Windows host is affected by multiple vulnerabilities.
Description
The remote Windows host is missing security update 5043064. It is, therefore, affected by multiple vulnerabilities

- Windows MSHTML Platform Spoofing Vulnerability (CVE-2024-43461)

- Windows Remote Access Connection Manager Elevation of Privilege Vulnerability (CVE-2024-38240)

- Windows TCP/IP Remote Code Execution Vulnerability (CVE-2024-21416, CVE-2024-38045)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Apply Security Update 5043064
Risk Factor
Critical
CVSS v3.0 Base Score
9.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
9.1 (CVSS:3.0/E:F/RL:O/RC:C)
EPSS Score
0.1427
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
8.3 (CVSS2#E:F/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2024-21416
CVE CVE-2024-30073
CVE CVE-2024-38014
CVE CVE-2024-38045
CVE CVE-2024-38046
CVE CVE-2024-38119
CVE CVE-2024-38217
CVE CVE-2024-38234
CVE CVE-2024-38235
CVE CVE-2024-38237
CVE CVE-2024-38238
CVE CVE-2024-38239
CVE CVE-2024-38240
CVE CVE-2024-38241
CVE CVE-2024-38242
CVE CVE-2024-38243
CVE CVE-2024-38244
CVE CVE-2024-38245
CVE CVE-2024-38246
CVE CVE-2024-38247
CVE CVE-2024-38248
CVE CVE-2024-38249
CVE CVE-2024-38250
CVE CVE-2024-38252
CVE CVE-2024-38254
CVE CVE-2024-38256
CVE CVE-2024-38257
CVE CVE-2024-43461
CVE CVE-2024-43487
MSKB 5043064
XREF MSFT:MS24-5043064
XREF CISA-KNOWN-EXPLOITED:2024/10/07
XREF CISA-KNOWN-EXPLOITED:2024/10/01
XREF IAVA:2024-A-0575-S
XREF IAVA:2024-A-0576-S
Exploitable With
Core Impact (true)
Plugin Information
Published: 2024/09/10, Modified: 2025/10/22
Plugin Output

tcp/445/cifs


The remote host is missing one of the following rollup KBs :
- 5043064

- C:\Windows\system32\ntoskrnl.exe has not been patched.
Remote version : 10.0.19041.2006
Should be : 10.0.19041.4894
208292 - KB5044273: Windows 10 version 21H2 / Windows 10 Version 22H2 Security Update (October 2024)
-
Synopsis
The remote Windows host is affected by multiple vulnerabilities.
Description
The remote Windows host is missing security update 5044273. It is, therefore, affected by multiple vulnerabilities

- libcurl's ASN1 parser has this utf8asn1str() function used for parsing an ASN.1 UTF-8 string. Itcan detect an invalid field and return error. Unfortunately, when doing so it also invokes `free()` on a 4 byte localstack buffer. Most modern malloc implementations detect this error and immediately abort. Some however accept the input pointer and add that memory to its list of available chunks. This leads to the overwriting of nearby stack memory. The content of the overwrite is decided by the `free()` implementation; likely to be memory pointers and a set of flags. The most likely outcome of exploting this flaw is a crash, although it cannot be ruled out that more serious results can be had in special circumstances. (CVE-2024-6197)

- Remote Desktop Client Remote Code Execution Vulnerability (CVE-2024-43599)

- An attacker could exploit a use after free vulnerability within the OS SAPI component to execute arbitrary code in the context of the compromised user to disclose sensitive information, compromise system integrity or impact the availability of the victim's system. (CVE-2024-43574)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Apply Security Update 5044273
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
8.4 (CVSS:3.0/E:H/RL:O/RC:C)
EPSS Score
0.605
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
8.7 (CVSS2#E:H/RL:OF/RC:C)
STIG Severity
I
References
Plugin Information
Published: 2024/10/08, Modified: 2024/11/18
Plugin Output

tcp/445/cifs


The remote host is missing one of the following rollup KBs :
- 5044273

- C:\Windows\system32\ntoskrnl.exe has not been patched.
Remote version : 10.0.19041.2006
Should be : 10.0.19041.5007
210858 - KB5046613: Windows 10 version 21H2 / Windows 10 Version 22H2 Security Update (November 2024)
-
Synopsis
The remote Windows host is affected by multiple vulnerabilities.
Description
The remote Windows host is missing security update 5046613. It is, therefore, affected by multiple vulnerabilities

- Windows Task Scheduler Elevation of Privilege Vulnerability (CVE-2024-49039)

- Windows Telephony Service Remote Code Execution Vulnerability (CVE-2024-43620, CVE-2024-43621, CVE-2024-43622, CVE-2024-43627, CVE-2024-43628, CVE-2024-43635)

- Windows NT OS Kernel Elevation of Privilege Vulnerability (CVE-2024-43623)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Apply Security Update 5046613
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
8.4 (CVSS:3.0/E:H/RL:O/RC:C)
EPSS Score
0.9031
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
8.7 (CVSS2#E:H/RL:OF/RC:C)
STIG Severity
I
References
Plugin Information
Published: 2024/11/12, Modified: 2025/10/22
Plugin Output

tcp/445/cifs


The remote host is missing one of the following rollup KBs :
- 5046613

- C:\Windows\system32\ntoskrnl.exe has not been patched.
Remote version : 10.0.19041.2006
Should be : 10.0.19041.5129
212228 - KB5048652: Windows 10 version 21H2 / Windows 10 Version 22H2 Security Update (December 2024)
-
Synopsis
The remote Windows host is affected by multiple vulnerabilities.
Description
The remote Windows host is missing security update 5048652. It is, therefore, affected by multiple vulnerabilities

- Windows Kernel-Mode Driver Elevation of Privilege Vulnerability (CVE-2024-49074)

- Input Method Editor (IME) Remote Code Execution Vulnerability (CVE-2024-49079)

- Windows Common Log File System Driver Elevation of Privilege Vulnerability (CVE-2024-49090)

- Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability (CVE-2024-49112)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Apply Security Update 5048652
Risk Factor
Critical
CVSS v3.0 Base Score
8.4 (CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
8.0 (CVSS:3.0/E:H/RL:O/RC:C)
EPSS Score
0.8777
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
8.7 (CVSS2#E:H/RL:OF/RC:C)
STIG Severity
I
References
Exploitable With
Core Impact (true)
Plugin Information
Published: 2024/12/10, Modified: 2025/10/06
Plugin Output

tcp/445/cifs


The remote host is missing one of the following rollup KBs :
- 5048652

- C:\Windows\system32\ntoskrnl.exe has not been patched.
Remote version : 10.0.19041.2006
Should be : 10.0.19041.5247
214121 - KB5049981: Windows 10 version 21H2 / Windows 10 Version 22H2 Security Update (January 2025)
-
Synopsis
The remote Windows host is affected by multiple vulnerabilities.
Description
The remote Windows host is missing security update 5049981. It is, therefore, affected by multiple vulnerabilities

- Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability (CVE-2025-21307)

- Windows Telephony Service Remote Code Execution Vulnerability (CVE-2025-21223, CVE-2025-21233, CVE-2025-21236, CVE-2025-21237, CVE-2025-21238, CVE-2025-21239, CVE-2025-21240, CVE-2025-21241, CVE-2025-21243, CVE-2025-21244, CVE-2025-21245, CVE-2025-21246, CVE-2025-21248, CVE-2025-21250, CVE-2025-21252, CVE-2025-21266, CVE-2025-21273, CVE-2025-21282, CVE-2025-21286, CVE-2025-21302, CVE-2025-21303, CVE-2025-21305, CVE-2025-21306, CVE-2025-21339, CVE-2025-21409, CVE-2025-21411, CVE-2025-21413, CVE-2025-21417)

- Windows BitLocker Information Disclosure Vulnerability (CVE-2025-21210, CVE-2025-21214)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Apply Security Update 5049981
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
8.4 (CVSS:3.0/E:H/RL:O/RC:C)
EPSS Score
0.7811
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
8.7 (CVSS2#E:H/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2024-7344
CVE CVE-2025-21189
CVE CVE-2025-21202
CVE CVE-2025-21207
CVE CVE-2025-21210
CVE CVE-2025-21211
CVE CVE-2025-21213
CVE CVE-2025-21214
CVE CVE-2025-21215
CVE CVE-2025-21217
CVE CVE-2025-21219
CVE CVE-2025-21220
CVE CVE-2025-21223
CVE CVE-2025-21224
CVE CVE-2025-21226
CVE CVE-2025-21227
CVE CVE-2025-21228
CVE CVE-2025-21229
CVE CVE-2025-21230
CVE CVE-2025-21231
CVE CVE-2025-21232
CVE CVE-2025-21233
CVE CVE-2025-21234
CVE CVE-2025-21235
CVE CVE-2025-21236
CVE CVE-2025-21237
CVE CVE-2025-21238
CVE CVE-2025-21239
CVE CVE-2025-21240
CVE CVE-2025-21241
CVE CVE-2025-21242
CVE CVE-2025-21243
CVE CVE-2025-21244
CVE CVE-2025-21245
CVE CVE-2025-21246
CVE CVE-2025-21248
CVE CVE-2025-21249
CVE CVE-2025-21250
CVE CVE-2025-21251
CVE CVE-2025-21252
CVE CVE-2025-21255
CVE CVE-2025-21256
CVE CVE-2025-21257
CVE CVE-2025-21258
CVE CVE-2025-21260
CVE CVE-2025-21261
CVE CVE-2025-21263
CVE CVE-2025-21265
CVE CVE-2025-21266
CVE CVE-2025-21268
CVE CVE-2025-21269
CVE CVE-2025-21270
CVE CVE-2025-21271
CVE CVE-2025-21272
CVE CVE-2025-21273
CVE CVE-2025-21274
CVE CVE-2025-21275
CVE CVE-2025-21276
CVE CVE-2025-21277
CVE CVE-2025-21278
CVE CVE-2025-21280
CVE CVE-2025-21281
CVE CVE-2025-21282
CVE CVE-2025-21284
CVE CVE-2025-21285
CVE CVE-2025-21286
CVE CVE-2025-21287
CVE CVE-2025-21288
CVE CVE-2025-21289
CVE CVE-2025-21290
CVE CVE-2025-21291
CVE CVE-2025-21292
CVE CVE-2025-21293
CVE CVE-2025-21294
CVE CVE-2025-21295
CVE CVE-2025-21296
CVE CVE-2025-21298
CVE CVE-2025-21299
CVE CVE-2025-21300
CVE CVE-2025-21301
CVE CVE-2025-21302
CVE CVE-2025-21303
CVE CVE-2025-21304
CVE CVE-2025-21305
CVE CVE-2025-21306
CVE CVE-2025-21307
CVE CVE-2025-21308
CVE CVE-2025-21310
CVE CVE-2025-21312
CVE CVE-2025-21314
CVE CVE-2025-21316
CVE CVE-2025-21317
CVE CVE-2025-21318
CVE CVE-2025-21319
CVE CVE-2025-21320
CVE CVE-2025-21321
CVE CVE-2025-21323
CVE CVE-2025-21324
CVE CVE-2025-21325
CVE CVE-2025-21327
CVE CVE-2025-21328
CVE CVE-2025-21329
CVE CVE-2025-21330
CVE CVE-2025-21331
CVE CVE-2025-21332
CVE CVE-2025-21333
CVE CVE-2025-21334
CVE CVE-2025-21335
CVE CVE-2025-21336
CVE CVE-2025-21338
CVE CVE-2025-21339
CVE CVE-2025-21340
CVE CVE-2025-21341
CVE CVE-2025-21374
CVE CVE-2025-21378
CVE CVE-2025-21382
CVE CVE-2025-21389
CVE CVE-2025-21409
CVE CVE-2025-21411
CVE CVE-2025-21413
CVE CVE-2025-21417
MSKB 5049981
XREF MSFT:MS25-5049981
XREF CISA-KNOWN-EXPLOITED:2025/02/04
XREF IAVA:2025-A-0034-S
XREF IAVA:2025-A-0033-S
XREF CWE:20
XREF CWE:41
XREF CWE:59
XREF CWE:94
XREF CWE:122
XREF CWE:125
XREF CWE:126
XREF CWE:190
XREF CWE:191
XREF CWE:200
XREF CWE:203
XREF CWE:269
XREF CWE:284
XREF CWE:285
XREF CWE:347
XREF CWE:362
XREF CWE:400
XREF CWE:415
XREF CWE:416
XREF CWE:451
XREF CWE:476
XREF CWE:532
XREF CWE:591
XREF CWE:636
XREF CWE:693
XREF CWE:732
XREF CWE:908
XREF CWE:922
Exploitable With
Core Impact (true) Metasploit (true)
Plugin Information
Published: 2025/01/14, Modified: 2025/10/22
Plugin Output

tcp/445/cifs


The remote host is missing one of the following rollup KBs :
- 5049981

- C:\Windows\system32\ntoskrnl.exe has not been patched.
Remote version : 10.0.19041.2006
Should be : 10.0.19041.5369
216129 - KB5051974: Windows 10 version 21H2 / Windows 10 Version 22H2 Security Update (February 2025)
-
Synopsis
The remote Windows host is affected by multiple vulnerabilities.
Description
The remote Windows host is missing security update 5051974. It is, therefore, affected by multiple vulnerabilities

- Windows Telephony Service Remote Code Execution Vulnerability (CVE-2025-21190, CVE-2025-21200, CVE-2025-21371, CVE-2025-21406, CVE-2025-21407)

- Microsoft Digest Authentication Remote Code Execution Vulnerability (CVE-2025-21368, CVE-2025-21369)

- Windows Telephony Server Remote Code Execution Vulnerability (CVE-2025-21201)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Apply Security Update 5051974
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
8.2 (CVSS:3.0/E:F/RL:O/RC:C)
EPSS Score
0.2857
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
8.3 (CVSS2#E:F/RL:OF/RC:C)
STIG Severity
I
References
Exploitable With
Core Impact (true)
Plugin Information
Published: 2025/02/11, Modified: 2025/10/06
Plugin Output

tcp/445/cifs


The remote host is missing one of the following rollup KBs :
- 5051974

- C:\Windows\system32\ntoskrnl.exe has not been patched.
Remote version : 10.0.19041.2006
Should be : 10.0.19041.5486
232615 - KB5053606: Windows 10 version 21H2 / Windows 10 Version 22H2 Security Update (March 2025)
-
Synopsis
The remote Windows host is affected by multiple vulnerabilities.
Description
The remote Windows host is missing security update 5053606. It is, therefore, affected by multiple vulnerabilities

- Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network. (CVE-2025-26645)

- Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network. (CVE-2025-24035)

- ** UNSUPPORTED WHEN ASSIGNED ** A privilege escalation vulnerability in CxUIUSvc64.exe and CxUIUSvc32.exe of Synaptics audio drivers allows a local authorized attacker to load a DLL in a privileged process. Out of an abundance of caution, this CVE ID is being assigned to better serve our customers and ensure all who are still running this product understand that the product is End-of-Life and should be removed. For more information on this, refer to the CVE Record's reference information. (CVE-2024-9157)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Apply Security Update 5053606
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
8.2 (CVSS:3.0/E:F/RL:O/RC:C)
EPSS Score
0.5765
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
8.3 (CVSS2#E:F/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2024-9157
CVE CVE-2025-21180
CVE CVE-2025-21247
CVE CVE-2025-24035
CVE CVE-2025-24044
CVE CVE-2025-24046
CVE CVE-2025-24048
CVE CVE-2025-24050
CVE CVE-2025-24051
CVE CVE-2025-24054
CVE CVE-2025-24055
CVE CVE-2025-24056
CVE CVE-2025-24059
CVE CVE-2025-24061
CVE CVE-2025-24066
CVE CVE-2025-24067
CVE CVE-2025-24071
CVE CVE-2025-24072
CVE CVE-2025-24984
CVE CVE-2025-24985
CVE CVE-2025-24987
CVE CVE-2025-24988
CVE CVE-2025-24991
CVE CVE-2025-24992
CVE CVE-2025-24993
CVE CVE-2025-24995
CVE CVE-2025-24996
CVE CVE-2025-24997
CVE CVE-2025-26633
CVE CVE-2025-26645
MSKB 5053606
XREF MSFT:MS25-5053606
XREF IAVA:2025-A-0181-S
XREF IAVA:2025-A-0182-S
XREF CISA-KNOWN-EXPLOITED:2025/05/08
XREF CISA-KNOWN-EXPLOITED:2025/04/01
XREF CWE:23
XREF CWE:41
XREF CWE:73
XREF CWE:122
XREF CWE:125
XREF CWE:126
XREF CWE:190
XREF CWE:200
XREF CWE:284
XREF CWE:416
XREF CWE:476
XREF CWE:532
XREF CWE:591
XREF CWE:681
XREF CWE:693
XREF CWE:707
Plugin Information
Published: 2025/03/11, Modified: 2025/09/17
Plugin Output

tcp/445/cifs


The remote host is missing one of the following rollup KBs :
- 5053606

- C:\Windows\system32\ntoskrnl.exe has not been patched.
Remote version : 10.0.19041.2006
Should be : 10.0.19041.5607
234050 - KB5055518: Windows 10 version 21H2 / Windows 10 Version 22H2 Security Update (April 2025)
-
Synopsis
The remote Windows host is affected by multiple vulnerabilities.
Description
The remote Windows host is missing security update 5055518. It is, therefore, affected by multiple vulnerabilities

- Use after free in Windows Win32K - GRFX allows an unauthorized attacker to elevate privileges over a network. (CVE-2025-26687)
- A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. (CVE-2025-27481)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Apply Security Update 5055518
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
8.2 (CVSS:3.0/E:F/RL:O/RC:C)
EPSS Score
0.2827
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
8.3 (CVSS2#E:F/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2025-21191
CVE CVE-2025-21197
CVE CVE-2025-21204
CVE CVE-2025-21205
CVE CVE-2025-21221
CVE CVE-2025-21222
CVE CVE-2025-24058
CVE CVE-2025-24060
CVE CVE-2025-24062
CVE CVE-2025-24073
CVE CVE-2025-24074
CVE CVE-2025-26635
CVE CVE-2025-26637
CVE CVE-2025-26639
CVE CVE-2025-26640
CVE CVE-2025-26641
CVE CVE-2025-26644
CVE CVE-2025-26648
CVE CVE-2025-26663
CVE CVE-2025-26665
CVE CVE-2025-26666
CVE CVE-2025-26668
CVE CVE-2025-26669
CVE CVE-2025-26670
CVE CVE-2025-26672
CVE CVE-2025-26673
CVE CVE-2025-26674
CVE CVE-2025-26675
CVE CVE-2025-26678
CVE CVE-2025-26679
CVE CVE-2025-26681
CVE CVE-2025-26686
CVE CVE-2025-26687
CVE CVE-2025-26688
CVE CVE-2025-27467
CVE CVE-2025-27469
CVE CVE-2025-27471
CVE CVE-2025-27473
CVE CVE-2025-27476
CVE CVE-2025-27477
CVE CVE-2025-27478
CVE CVE-2025-27481
CVE CVE-2025-27484
CVE CVE-2025-27487
CVE CVE-2025-27490
CVE CVE-2025-27491
CVE CVE-2025-27727
CVE CVE-2025-27729
CVE CVE-2025-27730
CVE CVE-2025-27731
CVE CVE-2025-27732
CVE CVE-2025-27735
CVE CVE-2025-27736
CVE CVE-2025-27737
CVE CVE-2025-27738
CVE CVE-2025-27739
CVE CVE-2025-27742
CVE CVE-2025-29809
CVE CVE-2025-29810
CVE CVE-2025-29824
MSKB 5055518
XREF CISA-KNOWN-EXPLOITED:2025/04/29
XREF MSFT:MS25-5055518
XREF IAVA:2025-A-0256-S
XREF IAVA:2025-A-0255-S
XREF CWE:20
XREF CWE:59
XREF CWE:121
XREF CWE:122
XREF CWE:125
XREF CWE:126
XREF CWE:190
XREF CWE:200
XREF CWE:284
XREF CWE:345
XREF CWE:367
XREF CWE:400
XREF CWE:415
XREF CWE:416
XREF CWE:591
XREF CWE:667
XREF CWE:693
XREF CWE:787
XREF CWE:822
XREF CWE:922
XREF CWE:1039
XREF CWE:1390
Plugin Information
Published: 2025/04/08, Modified: 2025/09/17
Plugin Output

tcp/445/cifs


The remote host is missing one of the following rollup KBs :
- 5055518

- C:\Windows\system32\ntoskrnl.exe has not been patched.
Remote version : 10.0.19041.2006
Should be : 10.0.19041.5730
235858 - KB5058379: Windows 10 version 21H2 / Windows 10 Version 22H2 Security Update (May 2025)
-
Synopsis
The remote Windows host is affected by multiple vulnerabilities.
Description
The remote Windows host is missing security update 5058379. It is, therefore, affected by multiple vulnerabilities

- Heap-based buffer overflow in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network. (CVE-2025-29967)

- Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. (CVE-2025-29830, CVE-2025-29958, CVE-2025-29959)

- Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. (CVE-2025-29832, CVE-2025-29835, CVE-2025-29836, CVE-2025-29960, CVE-2025-29961)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Apply Security Update 5058379
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
8.2 (CVSS:3.0/E:F/RL:O/RC:C)
EPSS Score
0.2127
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
8.3 (CVSS2#E:F/RL:OF/RC:C)
STIG Severity
I
References
Plugin Information
Published: 2025/05/13, Modified: 2025/09/17
Plugin Output

tcp/445/cifs


The remote host is missing one of the following rollup KBs :
- 5058379

- C:\Windows\system32\ntoskrnl.exe has not been patched.
Remote version : 10.0.19041.2006
Should be : 10.0.19041.5848
238084 - KB5060533: Windows 10 version 21H2 / Windows 10 Version 22H2 Security Update (June 2025)
-
Synopsis
The remote Windows host is affected by multiple vulnerabilities.
Description
The remote Windows host is missing security update 5060533. It is, therefore, affected by multiple vulnerabilities

- Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network. (CVE-2025-33066)

- Improper access control in Windows SMB allows an authorized attacker to elevate privileges over a network.
(CVE-2025-33073)

- Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
(CVE-2025-32712)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Apply Security Update 5060533
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
8.4 (CVSS:3.0/E:H/RL:O/RC:C)
EPSS Score
0.5119
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
8.7 (CVSS2#E:H/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2025-3052
CVE CVE-2025-24065
CVE CVE-2025-24068
CVE CVE-2025-24069
CVE CVE-2025-32712
CVE CVE-2025-32713
CVE CVE-2025-32714
CVE CVE-2025-32715
CVE CVE-2025-32716
CVE CVE-2025-32718
CVE CVE-2025-32719
CVE CVE-2025-32720
CVE CVE-2025-32721
CVE CVE-2025-32722
CVE CVE-2025-32724
CVE CVE-2025-33052
CVE CVE-2025-33053
CVE CVE-2025-33055
CVE CVE-2025-33056
CVE CVE-2025-33057
CVE CVE-2025-33058
CVE CVE-2025-33059
CVE CVE-2025-33060
CVE CVE-2025-33061
CVE CVE-2025-33062
CVE CVE-2025-33063
CVE CVE-2025-33064
CVE CVE-2025-33065
CVE CVE-2025-33066
CVE CVE-2025-33067
CVE CVE-2025-33070
CVE CVE-2025-33073
CVE CVE-2025-33075
CVE CVE-2025-47160
MSKB 5060533
XREF MSFT:MS25-5060533
XREF IAVA:2025-A-0428-S
XREF IAVA:2025-A-0417-S
XREF CISA-KNOWN-EXPLOITED:2025/11/10
XREF CISA-KNOWN-EXPLOITED:2025/07/01
XREF CWE:59
XREF CWE:73
XREF CWE:122
XREF CWE:125
XREF CWE:126
XREF CWE:190
XREF CWE:269
XREF CWE:284
XREF CWE:400
XREF CWE:416
XREF CWE:476
XREF CWE:693
XREF CWE:908
Exploitable With
Core Impact (true) Metasploit (true)
Plugin Information
Published: 2025/06/10, Modified: 2025/10/21
Plugin Output

tcp/445/cifs


The remote host is missing one of the following rollup KBs :
- 5060533

- C:\Windows\system32\ntoskrnl.exe has not been patched.
Remote version : 10.0.19041.2006
Should be : 10.0.19041.5965
249132 - KB5063709: Windows 10 version 21H2 / Windows 10 Version 22H2 Security Update (August 2025)
-
Synopsis
The remote Windows host is affected by multiple vulnerabilities.
Description
The remote Windows host is missing security update 5063709. It is, therefore, affected by multiple vulnerabilities

- Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network.
(CVE-2025-53766)

- Missing synchronization in Windows Hyper-V allows an authorized attacker to deny service over an adjacent network. (CVE-2025-49751)

- Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. (CVE-2025-49743)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Apply Security Update 5063709
Risk Factor
Critical
CVSS v3.0 Base Score
9.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
8.5 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.017
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.4 (CVSS2#E:U/RL:OF/RC:C)
STIG Severity
I
References
Plugin Information
Published: 2025/08/12, Modified: 2025/10/29
Plugin Output

tcp/445/cifs


The remote host is missing one of the following rollup KBs :
- 5063709

- C:\Windows\system32\ntoskrnl.exe has not been patched.
Remote version : 10.0.19041.2006
Should be : 10.0.19041.6216
261804 - KB5065429: Windows 10 version 21H2 / Windows 10 Version 22H2 Security Update (September 2025)
-
Synopsis
The remote Windows host is affected by multiple vulnerabilities.
Description
The remote Windows host is missing security update 5065429. It is, therefore, affected by multiple vulnerabilities

- SMB Server might be susceptible to relay attacks depending on the configuration. An attacker who successfully exploited these vulnerabilities could perform relay attacks and make the users subject to elevation of privilege attacks. The SMB Server already supports mechanisms for hardening against relay attacks: SMB Server signing SMB Server Extended Protection for Authentication (EPA) Microsoft is releasing this CVE to provide customers with audit capabilities to help them to assess their environment and to identify any potential device or software incompatibility issues before deploying SMB Server hardening measures that protect against relay attacks. If you have not already enabled SMB Server hardening measures, we advise customers to take the following actions to be protected from these relay attacks:
Assess your environment by utilizing the audit capabilities that we are exposing in the September 2025 security updates. See Support for Audit Events to deploy SMB Server HardeningSMB Server Signing & SMB Server EPA. Adopt appropriate SMB Server hardening measures. (CVE-2025-55234)

- Improper restriction of communication channel to intended endpoints in Windows PowerShell allows an authorized attacker to elevate privileges locally. (CVE-2025-49734)

- Stack-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. (CVE-2025-54099)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Apply Security Update 5065429
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.7 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0073
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.4 (CVSS2#E:U/RL:OF/RC:C)
STIG Severity
I
References
Plugin Information
Published: 2025/09/09, Modified: 2025/10/29
Plugin Output

tcp/445/cifs


The remote host is missing one of the following rollup KBs :
- 5065429

- C:\Windows\system32\ntoskrnl.exe has not been patched.
Remote version : 10.0.19041.2006
Should be : 10.0.19041.6328
274787 - KB5068781: Windows 10 version 21H2 / Windows 10 Version 22H2 Security Update (November 2025)
-
Synopsis
The remote Windows host is affected by multiple vulnerabilities.
Description
The remote Windows host is missing security update 5068781. It is, therefore, affected by multiple vulnerabilities

- An information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information. (CVE-2025-59509, CVE-2025-59513, CVE-2025-60706, CVE-2025-62208, CVE-2025-62209)
- A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. (CVE-2025-60724, CVE-2025-60714, CVE-2025-60715, CVE-2025-62452)

- An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges.
(CVE-2025-59505, CVE-2025-59506, CVE-2025-59507, CVE-2025-59508, CVE-2025-59511, CVE-2025-59512, CVE-2025-59514, CVE-2025-59515, CVE-2025-60703, CVE-2025-60704, CVE-2025-60705, CVE-2025-60707, CVE-2025-60709, CVE-2025-60716, CVE-2025-60717, CVE-2025-60719, CVE-2025-60720, CVE-2025-62213, CVE-2025-62215, CVE-2025-62217, CVE-2025-62218, CVE-2025-62219)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Apply Security Update 5068781
Risk Factor
Critical
CVSS v3.0 Base Score
7.0 (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
6.5 (CVSS:3.0/E:F/RL:O/RC:C)
EPSS Score
0.0009
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
8.3 (CVSS2#E:F/RL:OF/RC:C)
STIG Severity
I
References
Plugin Information
Published: 2025/11/11, Modified: 2025/11/14
Plugin Output

tcp/445/cifs


The remote host is missing one of the following rollup KBs :
- 5068781

- C:\Windows\system32\ntoskrnl.exe has not been patched.
Remote version : 10.0.19041.2006
Should be : 10.0.19041.6575
277988 - KB5071546: Windows 10 version 21H2 / Windows 10 Version 22H2 Security Update (December 2025)
-
Synopsis
The remote Windows host is affected by multiple vulnerabilities.
Description
The remote Windows host is missing security update 5071546. It is, therefore, affected by multiple vulnerabilities

- Untrusted pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network. (CVE-2025-62549)

- Out-of-bounds read in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. (CVE-2025-62457)

- Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally. (CVE-2025-62458)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Apply Security Update 5071546
Risk Factor
Critical
CVSS v3.0 Base Score
7.8 (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.2 (CVSS:3.0/E:F/RL:O/RC:C)
EPSS Score
0.0821
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
8.3 (CVSS2#E:F/RL:OF/RC:C)
STIG Severity
I
References
Plugin Information
Published: 2025/12/09, Modified: 2025/12/17
Plugin Output

tcp/445/cifs


The remote host is missing one of the following rollup KBs :
- 5071546

- C:\Windows\system32\ntoskrnl.exe has not been patched.
Remote version : 10.0.19041.2006
Should be : 10.0.19041.6691
159592 - Microsoft Edge (Chromium) < 100.0.1185.36 Vulnerability
-
Synopsis
The remote host has an web browser installed that is affected by a vulnerability
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 100.0.1185.36. It is, therefore, affected by a vulnerability as referenced in the April 7, 2022 advisory.

- Type confusion in V8 in Google Chrome prior to 100.0.4896.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (CVE-2022-1232)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 100.0.1185.36 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.9 (CVSS:3.0/E:P/RL:O/RC:C)
EPSS Score
0.0987
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.8 (CVSS2#E:POC/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2022-1232
XREF IAVA:2022-A-0133-S
Plugin Information
Published: 2022/04/07, Modified: 2023/11/02
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 100.0.1185.36
159816 - Microsoft Edge (Chromium) < 100.0.1185.44 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 100.0.1185.44. It is, therefore, affected by multiple vulnerabilities as referenced in the April 15, 2022 advisory.

- Use after free in tab groups in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (CVE-2022-1313)

- Use after free in storage in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (CVE-2022-1305)

- Inappropriate implementation in compositing in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (CVE-2022-1306)

- Inappropriate implementation in full screen in Google Chrome on Android prior to 100.0.4896.88 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (CVE-2022-1307)

- Use after free in BFCache in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (CVE-2022-1308)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 100.0.1185.44 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
9.6 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
8.9 (CVSS:3.0/E:F/RL:O/RC:C)
EPSS Score
0.1169
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
8.3 (CVSS2#E:F/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2022-1305
CVE CVE-2022-1306
CVE CVE-2022-1307
CVE CVE-2022-1308
CVE CVE-2022-1309
CVE CVE-2022-1310
CVE CVE-2022-1312
CVE CVE-2022-1313
CVE CVE-2022-1314
CVE CVE-2022-1364
CVE CVE-2022-29144
XREF CISA-KNOWN-EXPLOITED:2022/05/06
XREF IAVA:2022-A-0156-S
Plugin Information
Published: 2022/04/18, Modified: 2023/11/01
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 100.0.1185.44
160319 - Microsoft Edge (Chromium) < 101.0.1210.32 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 101.0.1210.32. It is, therefore, affected by multiple vulnerabilities as referenced in the April 28, 2022 advisory.

- Use after free in Dev Tools in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via specific and direct user interaction. (CVE-2022-1493)

- Use after free in Vulkan in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (CVE-2022-1477)

- Use after free in SwiftShader in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (CVE-2022-1478)

- Use after free in ANGLE in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (CVE-2022-1479)

- Use after free in Sharing in Google Chrome on Mac prior to 101.0.4951.41 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page. (CVE-2022-1481)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
http://www.nessus.org/u?436625dd
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-1477
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-1478
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-1479
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-1481
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-1482
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-1483
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-1484
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-1485
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-1486
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-1487
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-1488
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-1490
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-1491
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-1492
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-1493
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-1494
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-1495
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-1497
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-1498
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-1499
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-1500
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-1501
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-29146
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-29147
Solution
Upgrade to Microsoft Edge version 101.0.1210.32 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.9 (CVSS:3.0/E:P/RL:O/RC:C)
EPSS Score
0.0141
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.8 (CVSS2#E:POC/RL:OF/RC:C)
STIG Severity
I
References
Plugin Information
Published: 2022/04/28, Modified: 2023/03/23
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 101.0.1210.32
161198 - Microsoft Edge (Chromium) < 101.0.1210.47 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 101.0.1210.47. It is, therefore, affected by multiple vulnerabilities as referenced in the May 13, 2022 advisory.

- Use after free in Sharing in Google Chrome prior to 101.0.4951.64 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page. (CVE-2022-1640)

- Use after free in Browser UI in Google Chrome prior to 101.0.4951.64 allowed a remote attacker who had convinced a user to engage in specific UI interaction to potentially exploit heap corruption via specific user interactions. (CVE-2022-1634)

- Use after free in Permission Prompts in Google Chrome prior to 101.0.4951.64 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via specific user interactions. (CVE-2022-1635)

- Use after free in Performance APIs in Google Chrome prior to 101.0.4951.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (CVE-2022-1636)

- Inappropriate implementation in Web Contents in Google Chrome prior to 101.0.4951.64 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (CVE-2022-1637)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 101.0.1210.47 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.7 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0041
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.4 (CVSS2#E:U/RL:OF/RC:C)
References
Plugin Information
Published: 2022/05/14, Modified: 2023/03/23
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 101.0.1210.47
162168 - Microsoft Edge (Chromium) < 102.0.1245.41 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 102.0.1245.41. It is, therefore, affected by multiple vulnerabilities as referenced in the June 13, 2022 advisory.

- Use after free in ANGLE in Google Chrome prior to 102.0.5005.115 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (CVE-2022-2011)

- Use after free in WebGPU in Google Chrome prior to 102.0.5005.115 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (CVE-2022-2007)

- Double free in WebGL in Google Chrome prior to 102.0.5005.115 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (CVE-2022-2008)

- Out of bounds read in compositing in Google Chrome prior to 102.0.5005.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
(CVE-2022-2010)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 102.0.1245.41 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
9.3 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:H)
CVSS v3.0 Temporal Score
8.4 (CVSS:3.0/E:P/RL:O/RC:C)
EPSS Score
0.0098
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.8 (CVSS2#E:POC/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2022-2007
CVE CVE-2022-2008
CVE CVE-2022-2010
CVE CVE-2022-2011
XREF IAVA:2022-A-0231-S
Plugin Information
Published: 2022/06/13, Modified: 2023/03/23
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 102.0.1245.41
162776 - Microsoft Edge (Chromium) < 103.0.1264.49 Vulnerability
-
Synopsis
The remote host has an web browser installed that is affected by a vulnerability
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 103.0.1264.49. It is, therefore, affected by a vulnerability as referenced in the July 6, 2022 advisory.

- Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (CVE-2022-2294)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 103.0.1264.49 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
8.4 (CVSS:3.0/E:H/RL:O/RC:C)
EPSS Score
0.0191
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
8.7 (CVSS2#E:H/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2022-2294
XREF IAVA:2022-A-0262-S
XREF CISA-KNOWN-EXPLOITED:2022/09/15
Plugin Information
Published: 2022/07/07, Modified: 2023/10/19
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 103.0.1264.49
163415 - Microsoft Edge (Chromium) < 103.0.1264.71 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 103.0.1264.71. It is, therefore, affected by multiple vulnerabilities as referenced in the July 22, 2022 advisory.

- : Use after free in Guest View. (CVE-2022-2477)

- : Use after free in PDF. (CVE-2022-2478)

- : Insufficient validation of untrusted input in File. (CVE-2022-2479)

- : Use after free in Service Worker API. (CVE-2022-2480)

- Use after free in Views. (CVE-2022-2481)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 103.0.1264.71 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.9 (CVSS:3.0/E:P/RL:O/RC:C)
EPSS Score
0.1407
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.8 (CVSS2#E:POC/RL:OF/RC:C)
References
Plugin Information
Published: 2022/07/23, Modified: 2023/03/23
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 103.0.1264.71
163893 - Microsoft Edge (Chromium) < 104.0.1293.47 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 104.0.1293.47. It is, therefore, affected by multiple vulnerabilities as referenced in the August 5, 2022 advisory.

- Use after free in Omnibox. (CVE-2022-2603)

- Use after free in Safe Browsing. (CVE-2022-2604)

- Out of bounds read in Dawn. (CVE-2022-2605)

- Use after free in Managed devices API. (CVE-2022-2606)

- Insufficient policy enforcement in Background Fetch. (CVE-2022-2610)

- Inappropriate implementation in Fullscreen API. (CVE-2022-2611)

- Side-channel information leakage in Keyboard input. (CVE-2022-2612)

- Use after free in Sign-In Flow. (CVE-2022-2614)

- Insufficient policy enforcement in Cookies. (CVE-2022-2615)

- Inappropriate implementation in Extensions API. (CVE-2022-2616)

- Use after free in Extensions API. (CVE-2022-2617)

- Insufficient validation of untrusted input in Internals. (CVE-2022-2618)

- Insufficient validation of untrusted input in Settings. (CVE-2022-2619)

- Use after free in Extensions. (CVE-2022-2621)

- Insufficient validation of untrusted input in Safe Browsing. (CVE-2022-2622)

- Use after free in Offline. (CVE-2022-2623)

- Heap buffer overflow in PDF. (CVE-2022-2624)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 104.0.1293.47 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
9.6 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
8.6 (CVSS:3.0/E:P/RL:O/RC:C)
EPSS Score
0.0098
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.8 (CVSS2#E:POC/RL:OF/RC:C)
References
Plugin Information
Published: 2022/08/06, Modified: 2024/02/05
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 104.0.1293.47
164293 - Microsoft Edge (Chromium) < 104.0.1293.63 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 104.0.1293.63. It is, therefore, affected by multiple vulnerabilities as referenced in the August 19, 2022 advisory.

- Use after free in FedCM. (CVE-2022-2852)

- Heap buffer overflow in Downloads. (CVE-2022-2853)

- Use after free in SwiftShader. (CVE-2022-2854)

- Use after free in ANGLE. (CVE-2022-2855)

- Use after free in Blink. (CVE-2022-2857)

- Use after free in Sign-In Flow. (CVE-2022-2858)

- Insufficient policy enforcement in Cookies. (CVE-2022-2860)

- Inappropriate implementation in Extensions API. (CVE-2022-2861)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 104.0.1293.63 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.9 (CVSS:3.0/E:P/RL:O/RC:C)
EPSS Score
0.0082
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.8 (CVSS2#E:POC/RL:OF/RC:C)
References
Plugin Information
Published: 2022/08/19, Modified: 2022/10/21
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 104.0.1293.63
164638 - Microsoft Edge (Chromium) < 105.0.1343.25 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 105.0.1343.25. It is, therefore, affected by multiple vulnerabilities as referenced in the September 1, 2022 advisory.

- Use after free in Network Service. (CVE-2022-3038)

- Use after free in WebSQL. (CVE-2022-3039, CVE-2022-3041)

- Use after free in Layout. (CVE-2022-3040)

- Inappropriate implementation in Site Isolation. (CVE-2022-3044)

- Insufficient validation of untrusted input in V8. (CVE-2022-3045)

- Use after free in Browser Tag. (CVE-2022-3046)

- Insufficient policy enforcement in Extensions API. (CVE-2022-3047)

- Inappropriate implementation in Pointer Lock. (CVE-2022-3053)

- Insufficient policy enforcement in DevTools. (CVE-2022-3054)

- Use after free in Passwords. (CVE-2022-3055)

- Insufficient policy enforcement in Content Security Policy. (CVE-2022-3056)

- Inappropriate implementation in iframe Sandbox. (CVE-2022-3057)

- Use after free in Sign-In Flow. (CVE-2022-3058)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 105.0.1343.25 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
8.4 (CVSS:3.0/E:H/RL:O/RC:C)
EPSS Score
0.3599
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
8.7 (CVSS2#E:H/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2022-3038
CVE CVE-2022-3039
CVE CVE-2022-3040
CVE CVE-2022-3041
CVE CVE-2022-3044
CVE CVE-2022-3045
CVE CVE-2022-3046
CVE CVE-2022-3047
CVE CVE-2022-3053
CVE CVE-2022-3054
CVE CVE-2022-3055
CVE CVE-2022-3056
CVE CVE-2022-3057
CVE CVE-2022-3058
CVE CVE-2022-38012
XREF IAVA:2022-A-0361-S
XREF CISA-KNOWN-EXPLOITED:2023/04/20
Plugin Information
Published: 2022/09/02, Modified: 2023/10/13
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 105.0.1343.25
164658 - Microsoft Edge (Chromium) < 105.0.1343.27 Vulnerability
-
Synopsis
The remote host has an web browser installed that is affected by a vulnerability
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 105.0.1343.27. It is, therefore, affected by a vulnerability as referenced in the September 2, 2022 advisory.

- Insufficient data validation in Mojo. (CVE-2022-3075)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 105.0.1343.27 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
9.6 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
9.2 (CVSS:3.0/E:H/RL:O/RC:C)
EPSS Score
0.021
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
8.7 (CVSS2#E:H/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2022-3075
XREF CISA-KNOWN-EXPLOITED:2022/09/29
XREF IAVA:2022-A-0351-S
XREF IAVA:2022-A-0361-S
Plugin Information
Published: 2022/09/02, Modified: 2023/10/13
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 105.0.1343.27
165210 - Microsoft Edge (Chromium) < 105.0.1343.42 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 105.0.1343.42. It is, therefore, affected by multiple vulnerabilities as referenced in the September 15, 2022 advisory.

- Out of bounds write in Storage. (CVE-2022-3195)

- Use after free in PDF. (CVE-2022-3196, CVE-2022-3197, CVE-2022-3198)

- Use after free in Frames. (CVE-2022-3199)

- Heap buffer overflow in Internals. (CVE-2022-3200)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 105.0.1343.42 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.9 (CVSS:3.0/E:P/RL:O/RC:C)
EPSS Score
0.0053
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.8 (CVSS2#E:POC/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2022-3195
CVE CVE-2022-3196
CVE CVE-2022-3197
CVE CVE-2022-3198
CVE CVE-2022-3199
CVE CVE-2022-3200
XREF IAVA:2022-A-0379-S
XREF IAVA:2022-A-0396-S
Plugin Information
Published: 2022/09/16, Modified: 2023/10/25
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 105.0.1343.42
165721 - Microsoft Edge (Chromium) < 106.0.1370.34 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 106.0.1370.34. It is, therefore, affected by multiple vulnerabilities as referenced in the October 3, 2022 advisory.

- Use after free in CSS. (CVE-2022-3304)

- Use after free in Media. (CVE-2022-3307)

- Insufficient policy enforcement in Developer Tools. (CVE-2022-3308)

- Insufficient policy enforcement in Custom Tabs. (CVE-2022-3310)

- Use after free in Import. (CVE-2022-3311)

- Incorrect security UI in Full Screen. (CVE-2022-3313)

- Type confusion in Blink. (CVE-2022-3315)

- Insufficient validation of untrusted input in Safe Browsing. (CVE-2022-3316)

- Insufficient validation of untrusted input in Intents. (CVE-2022-3317)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 106.0.1370.34 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.7 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0047
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.4 (CVSS2#E:U/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2022-3370
CVE CVE-2022-3373
XREF IAVA:2022-A-0396-S
Plugin Information
Published: 2022/10/06, Modified: 2023/10/25
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 106.0.1370.34
166145 - Microsoft Edge (Chromium) < 106.0.1370.47 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 106.0.1370.47. It is, therefore, affected by multiple vulnerabilities as referenced in the October 14, 2022 advisory.

- Use after free in Skia. (CVE-2022-3445)

- Heap buffer overflow in WebSQL. (CVE-2022-3446)

- Inappropriate implementation in Custom Tabs. (CVE-2022-3447)

- Use after free in Safe Browsing. (CVE-2022-3449)

- Use after free in Peer Connection. (CVE-2022-3450)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 106.0.1370.47 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.7 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0027
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.4 (CVSS2#E:U/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2022-3445
CVE CVE-2022-3446
CVE CVE-2022-3447
CVE CVE-2022-3449
CVE CVE-2022-3450
XREF IAVA:2022-A-0437-S
Plugin Information
Published: 2022/10/14, Modified: 2022/11/11
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 106.0.1370.47
166629 - Microsoft Edge (Chromium) < 107.0.1418.24 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 107.0.1418.24. It is, therefore, affected by multiple vulnerabilities as referenced in the October 27, 2022 advisory.

- Type Confusion in V8. (CVE-2022-3652)

- Heap buffer overflow in Vulkan. (CVE-2022-3653)

- Use after free in Layout. (CVE-2022-3654)

- Heap buffer overflow in Media Galleries. (CVE-2022-3655)

- Insufficient data validation in File System. (CVE-2022-3656)

- Use after free in Extensions. (CVE-2022-3657)

- Inappropriate implementation in Full screen mode. (CVE-2022-3660)

- Insufficient data validation in Extensions. (CVE-2022-3661)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 107.0.1418.24 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.9 (CVSS:3.0/E:P/RL:O/RC:C)
EPSS Score
0.0688
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.8 (CVSS2#E:POC/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2022-3652
CVE CVE-2022-3653
CVE CVE-2022-3654
CVE CVE-2022-3655
CVE CVE-2022-3656
CVE CVE-2022-3657
CVE CVE-2022-3660
CVE CVE-2022-3661
XREF IAVA:2022-A-0446-S
XREF IAVA:2022-A-0454-S
Plugin Information
Published: 2022/10/27, Modified: 2022/11/28
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 107.0.1418.24
166749 - Microsoft Edge (Chromium) < 107.0.1418.26 Vulnerability
-
Synopsis
The remote host has an web browser installed that is affected by a vulnerability
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 107.0.1418.26. It is, therefore, affected by a vulnerability as referenced in the October 31, 2022 advisory.

- Type Confusion in V8. (CVE-2022-3723)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 107.0.1418.26 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
8.4 (CVSS:3.0/E:H/RL:O/RC:C)
EPSS Score
0.0052
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
8.7 (CVSS2#E:H/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2022-3723
XREF CISA-KNOWN-EXPLOITED:2022/11/18
XREF IAVA:2022-A-0453-S
Plugin Information
Published: 2022/11/01, Modified: 2023/10/06
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 106.0.1370.61 (Extended Stable Channel) / 107.0.1418.26 (Stable Channel)
167274 - Microsoft Edge (Chromium) < 107.0.1418.42 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 107.0.1418.42. It is, therefore, affected by multiple vulnerabilities as referenced in the November 10, 2022 advisory.

- Use after free in V8 in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2022-3885)

- Use after free in Speech Recognition in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2022-3886)

- Use after free in Web Workers in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2022-3887)

- Use after free in WebCodecs in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2022-3888)

- Type confusion in V8 in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2022-3889)

- Heap buffer overflow in Crashpad in Google Chrome on Android prior to 107.0.5304.106 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High) (CVE-2022-3890)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 107.0.1418.42 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
9.6 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
8.3 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0045
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.4 (CVSS2#E:U/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2022-3885
CVE CVE-2022-3886
CVE CVE-2022-3887
CVE CVE-2022-3888
CVE CVE-2022-3889
CVE CVE-2022-3890
XREF IAVA:2022-A-0493-S
Plugin Information
Published: 2022/11/10, Modified: 2023/10/25
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 107.0.1418.42
168239 - Microsoft Edge (Chromium) < 107.0.1418.62 Vulnerability
-
Synopsis
The remote host has an web browser installed that is affected by a vulnerability
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 107.0.1418.62. It is, therefore, affected by a vulnerability as referenced in the November 28, 2022 advisory.

- Heap buffer overflow in GPU in Google Chrome prior to 107.0.5304.121 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
(Chromium security severity: High) (CVE-2022-4135)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 107.0.1418.62 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
9.6 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
9.2 (CVSS:3.0/E:H/RL:O/RC:C)
EPSS Score
0.0008
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
8.7 (CVSS2#E:H/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2022-4135
XREF CISA-KNOWN-EXPLOITED:2022/12/19
XREF IAVA:2022-A-0501-S
XREF IAVA:2022-A-0502-S
Plugin Information
Published: 2022/11/29, Modified: 2023/09/20
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 107.0.1418.62
168406 - Microsoft Edge (Chromium) < 108.0.1462.41 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 108.0.1462.41. It is, therefore, affected by multiple vulnerabilities as referenced in the December 5, 2022 advisory.

- Type confusion in V8 in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2022-4174)

- Use after free in Camera Capture in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2022-4175)

- Use after free in Extensions in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install an extension to potentially exploit heap corruption via a crafted Chrome Extension and UI interaction. (Chromium security severity: High) (CVE-2022-4177)

- Use after free in Mojo in Google Chrome prior to 108.0.5359.71 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2022-4178)

- Use after free in Audio in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension.
(Chromium security severity: High) (CVE-2022-4179)

- Use after free in Mojo in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension.
(Chromium security severity: High) (CVE-2022-4180)

- Use after free in Forms in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2022-4181)

- Inappropriate implementation in Fenced Frames in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to bypass fenced frame restrictions via a crafted HTML page. (Chromium security severity: Medium) (CVE-2022-4182)

- Insufficient policy enforcement in Popup Blocker in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium) (CVE-2022-4183)

- Insufficient policy enforcement in Autofill in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to bypass autofill restrictions via a crafted HTML page. (Chromium security severity: Medium) (CVE-2022-4184)

- Inappropriate implementation in Navigation in Google Chrome on iOS prior to 108.0.5359.71 allowed a remote attacker to spoof the contents of the modal dialogue via a crafted HTML page. (Chromium security severity:
Medium) (CVE-2022-4185)

- Insufficient validation of untrusted input in Downloads in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install a malicious extension to bypass Downloads restrictions via a crafted HTML page. (Chromium security severity: Medium) (CVE-2022-4186)

- Insufficient policy enforcement in DevTools in Google Chrome on Windows prior to 108.0.5359.71 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page. (Chromium security severity:
Medium) (CVE-2022-4187)

- Insufficient validation of untrusted input in CORS in Google Chrome on Android prior to 108.0.5359.71 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium) (CVE-2022-4188)

- Insufficient policy enforcement in DevTools in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension. (Chromium security severity: Medium) (CVE-2022-4189)

- Insufficient data validation in Directory in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to bypass file system restrictions via a crafted HTML page. (Chromium security severity: Medium) (CVE-2022-4190)

- Use after free in Sign-In in Google Chrome prior to 108.0.5359.71 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via profile destruction. (Chromium security severity: Medium) (CVE-2022-4191)

- Use after free in Live Caption in Google Chrome prior to 108.0.5359.71 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via UI interaction. (Chromium security severity: Medium) (CVE-2022-4192)

- Insufficient policy enforcement in File System API in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to bypass file system restrictions via a crafted HTML page. (Chromium security severity:
Medium) (CVE-2022-4193)

- Use after free in Accessibility in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) (CVE-2022-4194)

- Insufficient policy enforcement in Safe Browsing in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to bypass Safe Browsing warnings via a malicious file. (Chromium security severity: Medium) (CVE-2022-4195)

- Type confusion in V8 in Google Chrome prior to 108.0.5359.94 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2022-4262)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
http://www.nessus.org/u?26b297b9
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41115
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-4174
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-4175
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-4177
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-4178
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-4179
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-4180
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-4181
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-4182
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-4183
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-4184
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-4185
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-4186
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-4187
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-4188
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-4189
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-4190
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-4191
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-4192
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-4193
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-4194
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-4195
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-4262
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-44688
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-44708
Solution
Upgrade to Microsoft Edge version 108.0.1462.41 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
8.4 (CVSS:3.0/E:H/RL:O/RC:C)
EPSS Score
0.1247
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
8.7 (CVSS2#E:H/RL:OF/RC:C)
STIG Severity
I
References
Plugin Information
Published: 2022/12/05, Modified: 2023/09/20
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 108.0.1462.41
171333 - Microsoft Edge (Chromium) < 108.0.1462.42 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 108.0.1462.42. It is, therefore, affected by multiple vulnerabilities as referenced in the December 5, 2022 advisory.

- Type confusion in V8 in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2022-4174)

- Use after free in Camera Capture in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2022-4175)

- Use after free in Extensions in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install an extension to potentially exploit heap corruption via a crafted Chrome Extension and UI interaction. (Chromium security severity: High) (CVE-2022-4177)

- Use after free in Mojo in Google Chrome prior to 108.0.5359.71 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2022-4178)

- Use after free in Audio in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension.
(Chromium security severity: High) (CVE-2022-4179)

- Use after free in Mojo in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension.
(Chromium security severity: High) (CVE-2022-4180)

- Use after free in Forms in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2022-4181)

- Inappropriate implementation in Fenced Frames in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to bypass fenced frame restrictions via a crafted HTML page. (Chromium security severity: Medium) (CVE-2022-4182)

- Insufficient policy enforcement in Popup Blocker in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium) (CVE-2022-4183)

- Insufficient policy enforcement in Autofill in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to bypass autofill restrictions via a crafted HTML page. (Chromium security severity: Medium) (CVE-2022-4184)

- Inappropriate implementation in Navigation in Google Chrome on iOS prior to 108.0.5359.71 allowed a remote attacker to spoof the contents of the modal dialogue via a crafted HTML page. (Chromium security severity:
Medium) (CVE-2022-4185)

- Insufficient validation of untrusted input in Downloads in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install a malicious extension to bypass Downloads restrictions via a crafted HTML page. (Chromium security severity: Medium) (CVE-2022-4186)

- Insufficient policy enforcement in DevTools in Google Chrome on Windows prior to 108.0.5359.71 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page. (Chromium security severity:
Medium) (CVE-2022-4187)

- Insufficient validation of untrusted input in CORS in Google Chrome on Android prior to 108.0.5359.71 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium) (CVE-2022-4188)

- Insufficient policy enforcement in DevTools in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension. (Chromium security severity: Medium) (CVE-2022-4189)

- Insufficient data validation in Directory in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to bypass file system restrictions via a crafted HTML page. (Chromium security severity: Medium) (CVE-2022-4190)

- Use after free in Sign-In in Google Chrome prior to 108.0.5359.71 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via profile destruction. (Chromium security severity: Medium) (CVE-2022-4191)

- Use after free in Live Caption in Google Chrome prior to 108.0.5359.71 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via UI interaction. (Chromium security severity: Medium) (CVE-2022-4192)

- Insufficient policy enforcement in File System API in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to bypass file system restrictions via a crafted HTML page. (Chromium security severity:
Medium) (CVE-2022-4193)

- Use after free in Accessibility in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) (CVE-2022-4194)

- Insufficient policy enforcement in Safe Browsing in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to bypass Safe Browsing warnings via a malicious file. (Chromium security severity: Medium) (CVE-2022-4195)

- Type confusion in V8 in Google Chrome prior to 108.0.5359.94 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2022-4262)

- Microsoft Edge (Chromium-based) Spoofing Vulnerability. (CVE-2022-44688)

- Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability. (CVE-2022-44708)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
http://www.nessus.org/u?245dfb65
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-4174
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-4175
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-4177
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-4178
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-4179
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-4180
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-4181
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-4182
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-4183
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-4184
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-4185
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-4186
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-4187
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-4188
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-4189
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-4190
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-4191
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-4192
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-4193
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-4194
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-4195
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-4262
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-44688
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-44708
Solution
Upgrade to Microsoft Edge version 108.0.1462.42 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
8.4 (CVSS:3.0/E:H/RL:O/RC:C)
EPSS Score
0.1247
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
8.7 (CVSS2#E:H/RL:OF/RC:C)
References
Plugin Information
Published: 2023/02/10, Modified: 2023/09/04
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 108.0.1462.42
168877 - Microsoft Edge (Chromium) < 108.0.1462.54 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 108.0.1462.54. It is, therefore, affected by multiple vulnerabilities as referenced in the December 16, 2022 advisory.

- Use after free in Blink Media in Google Chrome prior to 108.0.5359.124 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2022-4436)

- Use after free in Mojo IPC in Google Chrome prior to 108.0.5359.124 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2022-4437)

- Use after free in Blink Frames in Google Chrome prior to 108.0.5359.124 allowed a remote attacker who convinced the user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2022-4438)

- Use after free in Aura in Google Chrome on Windows prior to 108.0.5359.124 allowed a remote attacker who convinced the user to engage in specific UI interactions to potentially exploit heap corruption via specific UI interactions. (Chromium security severity: High) (CVE-2022-4439)

- Use after free in Profiles in Google Chrome prior to 108.0.5359.124 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) (CVE-2022-4440)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 108.0.1462.54 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.7 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0033
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.4 (CVSS2#E:U/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2022-4436
CVE CVE-2022-4437
CVE CVE-2022-4438
CVE CVE-2022-4439
CVE CVE-2022-4440
XREF IAVA:2023-A-0003-S
Plugin Information
Published: 2022/12/16, Modified: 2023/02/10
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 108.0.1462.54
170725 - Microsoft Edge (Chromium) < 109.0.1343.27 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 109.0.1343.27. It is, therefore, affected by multiple vulnerabilities as referenced in the January 26, 2023 advisory.

- Use after free in WebTransport. (CVE-2023-0471)

- Use after free in WebRTC. (CVE-2023-0472)

- Type Confusion in ServiceWorker API. (CVE-2023-0473)

- Use after free in GuestView. (CVE-2023-0474)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 109.0.1343.27 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.7 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0023
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.4 (CVSS2#E:U/RL:OF/RC:C)
References
Plugin Information
Published: 2023/01/27, Modified: 2023/02/07
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 109.0.1343.27
170007 - Microsoft Edge (Chromium) < 109.0.1518.49 / 108.0.1462.83 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 109.0.1518.49 / 108.0.1462.83. It is, therefore, affected by multiple vulnerabilities as referenced in the January 12, 2023 advisory.

- Heap buffer overflow in Network Service in Google Chrome prior to 109.0.5414.74 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page and specific interactions. (Chromium security severity: High) (CVE-2023-0129)

- Inappropriate implementation in in Fullscreen API in Google Chrome on Android prior to 109.0.5414.74 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
(Chromium security severity: Medium) (CVE-2023-0130)

- Inappropriate implementation in in iframe Sandbox in Google Chrome prior to 109.0.5414.74 allowed a remote attacker to bypass file download restrictions via a crafted HTML page. (Chromium security severity:
Medium) (CVE-2023-0131)

- Inappropriate implementation in in Permission prompts in Google Chrome on Windows prior to 109.0.5414.74 allowed a remote attacker to force acceptance of a permission prompt via a crafted HTML page. (Chromium security severity: Medium) (CVE-2023-0132)

- Inappropriate implementation in in Permission prompts in Google Chrome on Android prior to 109.0.5414.74 allowed a remote attacker to bypass main origin permission delegation via a crafted HTML page. (Chromium security severity: Medium) (CVE-2023-0133)

- Use after free in Cart in Google Chrome prior to 109.0.5414.74 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via database corruption and a crafted HTML page. (Chromium security severity: Medium) (CVE-2023-0134, CVE-2023-0135)

- Inappropriate implementation in in Fullscreen API in Google Chrome on Android prior to 109.0.5414.74 allowed a remote attacker to execute incorrect security UI via a crafted HTML page. (Chromium security severity: Medium) (CVE-2023-0136)

- Heap buffer overflow in libphonenumber in Google Chrome prior to 109.0.5414.74 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Low) (CVE-2023-0138)

- Insufficient validation of untrusted input in Downloads in Google Chrome on Windows prior to 109.0.5414.74 allowed a remote attacker to bypass download restrictions via a crafted HTML page. (Chromium security severity: Low) (CVE-2023-0139)

- Inappropriate implementation in in File System API in Google Chrome on Windows prior to 109.0.5414.74 allowed a remote attacker to bypass file system restrictions via a crafted HTML page. (Chromium security severity: Low) (CVE-2023-0140)

- Insufficient policy enforcement in CORS in Google Chrome prior to 109.0.5414.74 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low) (CVE-2023-0141)

- Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability. (CVE-2023-21775)

- Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2023-21795. (CVE-2023-21796)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 109.0.1518.49 / 108.0.1462.83 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.7 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0064
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.4 (CVSS2#E:U/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2023-0129
CVE CVE-2023-0130
CVE CVE-2023-0131
CVE CVE-2023-0132
CVE CVE-2023-0133
CVE CVE-2023-0134
CVE CVE-2023-0135
CVE CVE-2023-0136
CVE CVE-2023-0138
CVE CVE-2023-0139
CVE CVE-2023-0140
CVE CVE-2023-0141
XREF IAVA:2023-A-0034-S
XREF IAVA:2023-A-0029-S
Plugin Information
Published: 2023/01/13, Modified: 2023/10/24
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 109.0.1518.49
171332 - Microsoft Edge (Chromium) < 109.0.1518.70 / 108.0.1462.95 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 109.0.1518.70 / 108.0.1462.95. It is, therefore, affected by multiple vulnerabilities as referenced in the January 26, 2023 advisory.

- Use after free in WebTransport in Google Chrome prior to 109.0.5414.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2023-0471)

- Use after free in WebRTC in Google Chrome prior to 109.0.5414.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2023-0472)

- Type Confusion in ServiceWorker API in Google Chrome prior to 109.0.5414.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) (CVE-2023-0473)

- Use after free in GuestView in Google Chrome prior to 109.0.5414.119 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a Chrome web app.
(Chromium security severity: Medium) (CVE-2023-0474)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 109.0.1518.70 / 108.0.1462.95 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.7 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0023
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.4 (CVSS2#E:U/RL:OF/RC:C)
References
Plugin Information
Published: 2023/02/10, Modified: 2023/02/10
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 109.0.1518.70
171268 - Microsoft Edge (Chromium) < 110.0.1587.41 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 110.0.1587.41. It is, therefore, affected by multiple vulnerabilities as referenced in the February 9, 2023 advisory.

- Type confusion in V8 in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2023-0696)

- Inappropriate implementation in Full screen mode in Google Chrome on Android prior to 110.0.5481.77 allowed a remote attacker to spoof the contents of the security UI via a crafted HTML page. (Chromium security severity: High) (CVE-2023-0697)

- Out of bounds read in WebRTC in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: High) (CVE-2023-0698)

- Use after free in GPU in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page and browser shutdown. (Chromium security severity: Medium) (CVE-2023-0699)

- Inappropriate implementation in Download in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to potentially spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Medium) (CVE-2023-0700)

- Heap buffer overflow in WebUI in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via UI interaction . (Chromium security severity: Medium) (CVE-2023-0701)

- Type confusion in Data Transfer in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) (CVE-2023-0702)

- Type confusion in DevTools in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via UI interactions.
(Chromium security severity: Medium) (CVE-2023-0703)

- Insufficient policy enforcement in DevTools in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to bypass same origin policy and proxy settings via a crafted HTML page. (Chromium security severity: Low) (CVE-2023-0704)

- Integer overflow in Core in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who had one a race condition to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Low) (CVE-2023-0705)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 110.0.1587.41 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.7 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0031
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.4 (CVSS2#E:U/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2023-0696
CVE CVE-2023-0697
CVE CVE-2023-0698
CVE CVE-2023-0699
CVE CVE-2023-0700
CVE CVE-2023-0701
CVE CVE-2023-0702
CVE CVE-2023-0703
CVE CVE-2023-0704
CVE CVE-2023-0705
CVE CVE-2023-21794
CVE CVE-2023-23374
XREF IAVA:2023-A-0074-S
XREF IAVA:2023-A-0075-S
Plugin Information
Published: 2023/02/09, Modified: 2023/09/05
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 110.0.1587.41
171927 - Microsoft Edge (Chromium) < 110.0.1587.56 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 110.0.1587.56. It is, therefore, affected by multiple vulnerabilities as referenced in the February 25, 2023 advisory.

- Use after free in Web Payments API in Google Chrome on Android prior to 110.0.5481.177 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2023-0927)

- Use after free in SwiftShader in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2023-0928)

- Use after free in Vulkan in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2023-0929)

- Heap buffer overflow in Video in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2023-0930)

- Use after free in Video in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2023-0931)

- Use after free in WebRTC in Google Chrome on Windows prior to 110.0.5481.177 allowed a remote attacker who convinced the user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2023-0932)

- Integer overflow in PDF in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: Medium) (CVE-2023-0933)

- Use after free in Prompts in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical) (CVE-2023-0941)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 110.0.1587.56 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.7 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0045
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.4 (CVSS2#E:U/RL:OF/RC:C)
STIG Severity
I
References
Plugin Information
Published: 2023/02/27, Modified: 2023/05/23
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 110.0.1587.56
172572 - Microsoft Edge (Chromium) < 111.0.1661.41 / 110.0.1587.69 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 111.0.1661.41 / 110.0.1587.69. It is, therefore, affected by multiple vulnerabilities as referenced in the March 13, 2023 advisory.

- Use after free in Swiftshader in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2023-1213)

- Type confusion in V8 in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2023-1214)

- Type confusion in CSS in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2023-1215)

- Use after free in DevTools in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had convienced the user to engage in direct UI interaction to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2023-1216)

- Stack buffer overflow in Crash reporting in Google Chrome on Windows prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High) (CVE-2023-1217)

- Use after free in WebRTC in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2023-1218)

- Heap buffer overflow in Metrics in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2023-1219)

- Heap buffer overflow in UMA in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2023-1220)

- Insufficient policy enforcement in Extensions API in Google Chrome prior to 111.0.5563.64 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension. (Chromium security severity: Medium) (CVE-2023-1221)

- Heap buffer overflow in Web Audio API in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) (CVE-2023-1222)

- Insufficient policy enforcement in Autofill in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium) (CVE-2023-1223)

- Insufficient policy enforcement in Web Payments API in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity:
Medium) (CVE-2023-1224)

- Insufficient policy enforcement in Intents in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity:
Medium) (CVE-2023-1228)

- Inappropriate implementation in Permission prompts in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity:
Medium) (CVE-2023-1229)

- Inappropriate implementation in WebApp Installs in Google Chrome on Android prior to 111.0.5563.64 allowed an attacker who convinced a user to install a malicious WebApp to spoof the contents of the PWA installer via a crafted HTML page. (Chromium security severity: Medium) (CVE-2023-1230)

- Inappropriate implementation in Autofill in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker to potentially spoof the contents of the omnibox via a crafted HTML page. (Chromium security severity: Medium) (CVE-2023-1231)

- Insufficient policy enforcement in Resource Timing in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to obtain potentially sensitive information from API via a crafted HTML page. (Chromium security severity: Low) (CVE-2023-1232)

- Insufficient policy enforcement in Resource Timing in Google Chrome prior to 111.0.5563.64 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from API via a crafted Chrome Extension. (Chromium security severity: Low) (CVE-2023-1233)

- Inappropriate implementation in Intents in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chromium security severity: Low) (CVE-2023-1234)

- Type confusion in DevTools in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted UI interaction.
(Chromium security severity: Low) (CVE-2023-1235)

- Inappropriate implementation in Internals in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to spoof the origin of an iframe via a crafted HTML page. (Chromium security severity: Low) (CVE-2023-1236)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 111.0.1661.41 / 110.0.1587.69 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.9 (CVSS:3.0/E:P/RL:O/RC:C)
EPSS Score
0.0015
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.8 (CVSS2#E:POC/RL:OF/RC:C)
STIG Severity
I
References
Plugin Information
Published: 2023/03/15, Modified: 2023/10/24
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 111.0.1661.41
173711 - Microsoft Edge (Chromium) < 111.0.1661.54 / 110.0.1587.78 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 111.0.1661.54 / 110.0.1587.78. It is, therefore, affected by multiple vulnerabilities as referenced in the March 24, 2023 advisory.

- Use after free in Passwords in Google Chrome prior to 111.0.5563.110 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2023-1528)

- Out of bounds memory access in WebHID in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to potentially exploit heap corruption via a malicious HID device. (Chromium security severity: High) (CVE-2023-1529)

- Use after free in PDF in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2023-1530)

- Use after free in ANGLE in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2023-1531)

- Out of bounds read in GPU Video in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2023-1532)

- Use after free in WebProtect in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2023-1533)

- Out of bounds read in ANGLE in Google Chrome prior to 111.0.5563.110 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2023-1534)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 111.0.1661.54 / 110.0.1587.78 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
9.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
8.8 (CVSS:3.0/E:P/RL:O/RC:C)
EPSS Score
0.0082
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.8 (CVSS2#E:POC/RL:OF/RC:C)
STIG Severity
I
References
Plugin Information
Published: 2023/03/30, Modified: 2023/05/23
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 111.0.1661.54
174524 - Microsoft Edge (Chromium) < 112.0.1722.48
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 112.0.1722.48. It is, therefore, affected by a vulnerability as referenced in the April 15, 2023 advisory.

- Type confusion in V8 in Google Chrome prior to 112.0.5615.121 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2023-2033)

- A spoofing vulnerability could allow an attacker to bypass the Edge security warning message feature.
(CVE-2023-29334)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 112.0.1722.48 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
8.2 (CVSS:3.0/E:F/RL:O/RC:C)
EPSS Score
0.1716
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
8.3 (CVSS2#E:F/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2023-2033
CVE CVE-2023-29334
XREF IAVA:2023-A-0204-S
XREF IAVA:2023-A-0203-S
XREF IAVA:2023-A-0232-S
XREF CISA-KNOWN-EXPLOITED:2023/05/08
Plugin Information
Published: 2023/04/20, Modified: 2023/07/20
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 109.0.1518.100
174883 - Microsoft Edge (Chromium) < 112.0.1722.58 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 112.0.1722.58. It is, therefore, affected by multiple vulnerabilities as referenced in the April 21, 2023 advisory.

- Out of bounds memory access in Service Worker API in Google Chrome prior to 112.0.5615.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2023-2133, CVE-2023-2134)

- Use after free in DevTools in Google Chrome prior to 112.0.5615.137 allowed a remote attacker who convinced a user to enable specific preconditions to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2023-2135)

- Heap buffer overflow in sqlite in Google Chrome prior to 112.0.5615.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) (CVE-2023-2137)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 112.0.1722.58 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.7 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0061
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.4 (CVSS2#E:U/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2023-2133
CVE CVE-2023-2134
CVE CVE-2023-2135
CVE CVE-2023-2137
XREF IAVA:2023-A-0223-S
Plugin Information
Published: 2023/04/27, Modified: 2023/10/23
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 112.0.1722.58
176230 - Microsoft Edge (Chromium) < 113.0.1774.50 / 112.0.1722.84 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 113.0.1774.50 / 112.0.1722.84. It is, therefore, affected by multiple vulnerabilities as referenced in the May 18, 2023 advisory.

- Use after free in Navigation in Google Chrome prior to 113.0.5672.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical) (CVE-2023-2721)

- Use after free in Autofill UI in Google Chrome on Android prior to 113.0.5672.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity:
High) (CVE-2023-2722)

- Use after free in DevTools in Google Chrome prior to 113.0.5672.126 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2023-2723)

- Type confusion in V8 in Google Chrome prior to 113.0.5672.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2023-2724)

- Use after free in Guest View in Google Chrome prior to 113.0.5672.126 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.
(Chromium security severity: High) (CVE-2023-2725)

- Inappropriate implementation in WebApp Installs in Google Chrome prior to 113.0.5672.126 allowed an attacker who convinced a user to install a malicious web app to bypass install dialog via a crafted HTML page. (Chromium security severity: Medium) (CVE-2023-2726)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 113.0.1774.50 / 112.0.1722.84 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.9 (CVSS:3.0/E:P/RL:O/RC:C)
EPSS Score
0.1646
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.8 (CVSS2#E:POC/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2023-2721
CVE CVE-2023-2722
CVE CVE-2023-2723
CVE CVE-2023-2724
CVE CVE-2023-2725
CVE CVE-2023-2726
XREF IAVA:2023-A-0265-S
Plugin Information
Published: 2023/05/23, Modified: 2023/07/07
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 113.0.1774.50
179408 - Microsoft Edge (Chromium) < 114.0.1823.106 / 115.0.1901.200 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 114.0.1823.106 / 115.0.1901.200. It is, therefore, affected by multiple vulnerabilities as referenced in the August 7, 2023 advisory.

- Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability (CVE-2023-38157)

- Type Confusion in V8 in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High) (CVE-2023-4068, CVE-2023-4070)

- Type Confusion in V8 in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2023-4069)

- Heap buffer overflow in Visuals in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2023-4071)

- Out of bounds read and write in WebGL in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2023-4072)

- Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity:
High) (CVE-2023-4073)

- Use after free in Blink Task Scheduling in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2023-4074)

- Use after free in Cast in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2023-4075)

- Use after free in WebRTC in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted WebRTC session. (Chromium security severity: High) (CVE-2023-4076)

- Insufficient data validation in Extensions in Google Chrome prior to 115.0.5790.170 allowed an attacker who convinced a user to install a malicious extension to inject scripts or HTML into a privileged page via a crafted Chrome Extension. (Chromium security severity: Medium) (CVE-2023-4077)

- Inappropriate implementation in Extensions in Google Chrome prior to 115.0.5790.170 allowed an attacker who convinced a user to install a malicious extension to inject scripts or HTML into a privileged page via a crafted Chrome Extension. (Chromium security severity: Medium) (CVE-2023-4078)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 114.0.1823.106 / 115.0.1901.200 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.7 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0737
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.4 (CVSS2#E:U/RL:OF/RC:C)
STIG Severity
I
References
Plugin Information
Published: 2023/08/07, Modified: 2023/10/23
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 115.0.1901.200
176838 - Microsoft Edge (Chromium) < 114.0.1823.41 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 114.0.1823.41. It is, therefore, affected by multiple vulnerabilities as referenced in the June 6, 2023 advisory.

- Type confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2023-3079)

- An information disclosure vulnerability. (CVE-2023-33145)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 114.0.1823.41 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
8.2 (CVSS:3.0/E:F/RL:O/RC:C)
EPSS Score
0.1327
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
8.3 (CVSS2#E:F/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2023-3079
CVE CVE-2023-33145
XREF CISA-KNOWN-EXPLOITED:2023/06/28
XREF IAVA:2023-A-0274-S
XREF IAVA:2023-A-0302-S
Plugin Information
Published: 2023/06/07, Modified: 2023/07/20
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 114.0.1823.41
177519 - Microsoft Edge (Chromium) < 114.0.1823.51 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 114.0.1823.51. It is, therefore, affected by multiple vulnerabilities as referenced in the June 15, 2023 advisory.

- Use after free in Autofill payments in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical) (CVE-2023-3214)

- Use after free in WebRTC in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2023-3215)

- Type confusion in V8 in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2023-3216)

- Use after free in WebXR in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2023-3217)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 114.0.1823.51 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.9 (CVSS:3.0/E:P/RL:O/RC:C)
EPSS Score
0.1998
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.8 (CVSS2#E:POC/RL:OF/RC:C)
References
Plugin Information
Published: 2023/06/22, Modified: 2023/07/18
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 114.0.1823.51
177820 - Microsoft Edge (Chromium) < 114.0.1823.67 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 114.0.1823.67. It is, therefore, affected by multiple vulnerabilities as referenced in the June 29, 2023 advisory.

- Type Confusion in V8 in Google Chrome prior to 114.0.5735.198 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2023-3420)

- Use after free in Media in Google Chrome prior to 114.0.5735.198 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2023-3421)

- Use after free in Guest View in Google Chrome prior to 114.0.5735.198 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.
(Chromium security severity: High) (CVE-2023-3422)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 114.0.1823.67 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.7 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.024
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.4 (CVSS2#E:U/RL:OF/RC:C)
References
Plugin Information
Published: 2023/06/30, Modified: 2023/07/06
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 114.0.1823.67
178727 - Microsoft Edge (Chromium) < 114.0.1901.183 / 115.0.1901.183 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 114.0.1901.183 / 115.0.1901.183. It is, therefore, affected by multiple vulnerabilities as referenced in the July 21, 2023 advisory.

- Microsoft Edge (Chromium-based) Spoofing Vulnerability (CVE-2023-35392)

- Microsoft Edge for Android Spoofing Vulnerability (CVE-2023-38173)

- Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability (CVE-2023-38187)

- Use after free in WebRTC. (CVE-2023-3727, CVE-2023-3728)

- Use after free in Tab Groups. (CVE-2023-3730)

- Out of bounds memory access in Mojo. (CVE-2023-3732)

- Inappropriate implementation in WebApp Installs. (CVE-2023-3733)

- Inappropriate implementation in Picture In Picture. (CVE-2023-3734)

- Inappropriate implementation in Web API Permission Prompts. (CVE-2023-3735)

- Inappropriate implementation in Custom Tabs. (CVE-2023-3736)

- Inappropriate implementation in Notifications. (CVE-2023-3737)

- Inappropriate implementation in Autofill. (CVE-2023-3738)

- Insufficient validation of untrusted input in Themes. (CVE-2023-3740)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 114.0.1901.183 / 115.0.1901.183 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.9 (CVSS:3.0/E:P/RL:O/RC:C)
EPSS Score
0.0235
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.8 (CVSS2#E:POC/RL:OF/RC:C)
STIG Severity
I
References
Plugin Information
Published: 2023/07/21, Modified: 2023/08/11
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 115.0.1901.183
180040 - Microsoft Edge (Chromium) < 116.0.1938.54 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 116.0.1938.54. It is, therefore, affected by multiple vulnerabilities as referenced in the August 21, 2023 advisory.

- Use after free in Offline in Google Chrome on Android prior to 116.0.5845.96 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.
(Chromium security severity: High) (CVE-2023-2312)

- Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability (CVE-2023-36787)

- Microsoft Edge (Chromium-based) Information Disclosure Vulnerability (CVE-2023-38158)

- Use after free in Device Trust Connectors in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity:
High) (CVE-2023-4349)

- Inappropriate implementation in Fullscreen in Google Chrome on Android prior to 116.0.5845.96 allowed a remote attacker to potentially spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
(Chromium security severity: High) (CVE-2023-4350)

- Use after free in Network in Google Chrome prior to 116.0.5845.96 allowed a remote attacker who has elicited a browser shutdown to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2023-4351)

- Type confusion in V8 in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2023-4352)

- Heap buffer overflow in ANGLE in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2023-4353)

- Heap buffer overflow in Skia in Google Chrome prior to 116.0.5845.96 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2023-4354)

- Out of bounds memory access in V8 in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2023-4355)

- Use after free in Audio in Google Chrome prior to 116.0.5845.96 allowed a remote attacker who has convinced a user to engage in specific UI interaction to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) (CVE-2023-4356)

- Insufficient validation of untrusted input in XML in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to bypass file access restrictions via a crafted HTML page. (Chromium security severity: Medium) (CVE-2023-4357)

- Use after free in DNS in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) (CVE-2023-4358)

- Inappropriate implementation in App Launcher in Google Chrome on iOS prior to 116.0.5845.96 allowed a remote attacker to potentially spoof elements of the security UI via a crafted HTML page. (Chromium security severity: Medium) (CVE-2023-4359)

- Inappropriate implementation in Color in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to obfuscate security UI via a crafted HTML page. (Chromium security severity: Medium) (CVE-2023-4360)

- Inappropriate implementation in Autofill in Google Chrome on Android prior to 116.0.5845.96 allowed a remote attacker to bypass Autofill restrictions via a crafted HTML page. (Chromium security severity:
Medium) (CVE-2023-4361)

- Heap buffer overflow in Mojom IDL in Google Chrome prior to 116.0.5845.96 allowed a remote attacker who had compromised the renderer process and gained control of a WebUI process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) (CVE-2023-4362)

- Inappropriate implementation in WebShare in Google Chrome on Android prior to 116.0.5845.96 allowed a remote attacker to spoof the contents of a dialog URL via a crafted HTML page. (Chromium security severity: Medium) (CVE-2023-4363)

- Inappropriate implementation in Permission Prompts in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to obfuscate security UI via a crafted HTML page. (Chromium security severity: Medium) (CVE-2023-4364)

- Inappropriate implementation in Fullscreen in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to obfuscate security UI via a crafted HTML page. (Chromium security severity: Medium) (CVE-2023-4365)

- Use after free in Extensions in Google Chrome prior to 116.0.5845.96 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.
(Chromium security severity: Medium) (CVE-2023-4366)

- Insufficient policy enforcement in Extensions API in Google Chrome prior to 116.0.5845.96 allowed an attacker who convinced a user to install a malicious extension to bypass an enterprise policy via a crafted HTML page. (Chromium security severity: Medium) (CVE-2023-4367, CVE-2023-4368)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
http://www.nessus.org/u?9ae99e73
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-2312
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36787
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38158
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-4349
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-4350
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-4351
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-4352
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-4353
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-4354
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-4355
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-4356
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-4357
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-4358
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-4359
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-4360
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-4361
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-4362
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-4363
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-4364
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-4365
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-4366
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-4367
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-4368
Solution
Upgrade to Microsoft Edge version 116.0.1938.54 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.9 (CVSS:3.0/E:P/RL:O/RC:C)
EPSS Score
0.5699
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.8 (CVSS2#E:POC/RL:OF/RC:C)
STIG Severity
I
References
Plugin Information
Published: 2023/08/23, Modified: 2023/09/18
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 116.0.1938.54
180197 - Microsoft Edge (Chromium) < 116.0.1938.62 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 116.0.1938.62. It is, therefore, affected by multiple vulnerabilities as referenced in the August 25, 2023 advisory.

- Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability (CVE-2023-36741)

- Out of bounds memory access in V8 in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: High) (CVE-2023-4427)

- Out of bounds memory access in CSS in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: High) (CVE-2023-4428)

- Use after free in Loader in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2023-4429)

- Use after free in Vulkan in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2023-4430)

- Out of bounds memory access in Fonts in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium) (CVE-2023-4431)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 116.0.1938.62 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.9 (CVSS:3.0/E:P/RL:O/RC:C)
EPSS Score
0.7934
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.8 (CVSS2#E:POC/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2023-4427
CVE CVE-2023-4428
CVE CVE-2023-4429
CVE CVE-2023-4430
CVE CVE-2023-4431
CVE CVE-2023-36741
XREF IAVA:2023-A-0453-S
Plugin Information
Published: 2023/08/26, Modified: 2023/10/06
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 116.0.1938.62
180416 - Microsoft Edge (Chromium) < 116.0.1938.69 (CVE-2023-4572)
-
Synopsis
The remote host has an web browser installed that is affected by a vulnerability.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 116.0.1938.69. It is, therefore, affected by a vulnerability as referenced in the August 31, 2023 advisory.

- Use after free in MediaStream in Google Chrome prior to 116.0.5845.140 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2023-4572)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 116.0.1938.69 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.7 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0147
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.4 (CVSS2#E:U/RL:OF/RC:C)
References
Plugin Information
Published: 2023/08/31, Modified: 2023/09/25
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 116.0.1938.69
181128 - Microsoft Edge (Chromium) < 116.0.1938.76 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 116.0.1938.76. It is, therefore, affected by multiple vulnerabilities as referenced in the September 7, 2023 advisory.

- Out of bounds memory access in FedCM in Google Chrome prior to 116.0.5845.179 allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory read via a crafted HTML page.
(Chromium security severity: High) (CVE-2023-4761)

- Type Confusion in V8 in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High) (CVE-2023-4762)

- Use after free in Networks in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2023-4763)

- Incorrect security UI in BFCache in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: High) (CVE-2023-4764)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 116.0.1938.76 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
8.2 (CVSS:3.0/E:F/RL:O/RC:C)
EPSS Score
0.4022
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
8.3 (CVSS2#E:F/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2023-4761
CVE CVE-2023-4762
CVE CVE-2023-4763
CVE CVE-2023-4764
XREF IAVA:2023-A-0457-S
XREF CISA-KNOWN-EXPLOITED:2024/02/27
Plugin Information
Published: 2023/09/07, Modified: 2024/02/06
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 116.0.1938.76
182419 - Microsoft Edge (Chromium) < 116.0.1938.98 / 117.0.2045.47 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 116.0.1938.98 / 117.0.2045.47. It is, therefore, affected by multiple vulnerabilities as referenced in the September 29, 2023 advisory.

- There exists a use after free/double free in libwebp. An attacker can use the ApplyFiltersAndEncode() function and loop through to free best.bw and assign best = trial pointer. The second loop will then return 0 because of an Out of memory error in VP8 encoder, the pointer is still assigned to trial and the AddressSanitizer will attempt a double free. (CVE-2023-1999)

- Use after free in Passwords in Google Chrome prior to 117.0.5938.132 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via crafted UI interaction. (Chromium security severity: High) (CVE-2023-5186)

- Use after free in Extensions in Google Chrome prior to 117.0.5938.132 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.
(Chromium security severity: High) (CVE-2023-5187)

- Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2023-5217)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 116.0.1938.98 / 117.0.2045.47 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
8.2 (CVSS:3.0/E:F/RL:O/RC:C)
EPSS Score
0.0751
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
8.3 (CVSS2#E:F/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2023-1999
CVE CVE-2023-5186
CVE CVE-2023-5187
CVE CVE-2023-5217
XREF CISA-KNOWN-EXPLOITED:2023/10/23
XREF IAVA:2023-A-0523-S
Plugin Information
Published: 2023/10/02, Modified: 2023/10/23
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 117.0.2045.47
181483 - Microsoft Edge (Chromium) < 117.0.2045.31 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 117.0.2045.31. It is, therefore, affected by multiple vulnerabilities as referenced in the September 15, 2023 advisory.

- Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability (CVE-2023-36562, CVE-2023-36735)

- Microsoft Edge (Chromium-based) Spoofing Vulnerability (CVE-2023-36727)

- Heap buffer overflow in WebP in Google Chrome prior to 116.0.5845.187 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical) (CVE-2023-4863)

- Inappropriate implementation in Custom Tabs in Google Chrome on Android prior to 117.0.5938.62 allowed a remote attacker to obfuscate a permission prompt via a crafted HTML page. (Chromium security severity:
Medium) (CVE-2023-4900)

- Inappropriate implementation in Prompts in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to potentially spoof security UI via a crafted HTML page. (Chromium security severity: Medium) (CVE-2023-4901)

- Inappropriate implementation in Input in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to spoof security UI via a crafted HTML page. (Chromium security severity: Medium) (CVE-2023-4902)

- Inappropriate implementation in Custom Mobile Tabs in Google Chrome on Android prior to 117.0.5938.62 allowed a remote attacker to spoof security UI via a crafted HTML page. (Chromium security severity:
Medium) (CVE-2023-4903)

- Insufficient policy enforcement in Downloads in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to bypass Enterprise policy restrictions via a crafted download. (Chromium security severity:
Medium) (CVE-2023-4904)

- Inappropriate implementation in Prompts in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to spoof security UI via a crafted HTML page. (Chromium security severity: Medium) (CVE-2023-4905)

- Insufficient policy enforcement in Autofill in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to bypass Autofill restrictions via a crafted HTML page. (Chromium security severity: Low) (CVE-2023-4906)

- Inappropriate implementation in Intents in Google Chrome on Android prior to 117.0.5938.62 allowed a remote attacker to obfuscate security UI via a crafted HTML page. (Chromium security severity: Low) (CVE-2023-4907)

- Inappropriate implementation in Picture in Picture in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to spoof security UI via a crafted HTML page. (Chromium security severity: Low) (CVE-2023-4908)

- Inappropriate implementation in Interstitials in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to obfuscate security UI via a crafted HTML page. (Chromium security severity: Low) (CVE-2023-4909)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 117.0.2045.31 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
8.4 (CVSS:3.0/E:H/RL:O/RC:C)
EPSS Score
0.9408
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
8.7 (CVSS2#E:H/RL:OF/RC:C)
STIG Severity
I
References
Plugin Information
Published: 2023/09/15, Modified: 2025/01/01
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 117.0.2045.31
182556 - Microsoft Edge (Chromium) < 117.0.2045.55 (CVE-2023-5346)
-
Synopsis
The remote host has an web browser installed that is affected by a vulnerability.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 117.0.2045.55. It is, therefore, affected by a vulnerability as referenced in the October 4, 2023 advisory.

- Type Confusion in V8. (CVE-2023-5346)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 117.0.2045.55 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.7 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0181
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.4 (CVSS2#E:U/RL:OF/RC:C)
References
Plugin Information
Published: 2023/10/04, Modified: 2023/10/09
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 117.0.2045.55
185436 - Microsoft Edge (Chromium) < 118.0.2088.102 / 119.0.2151.58 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 118.0.2088.102 / 119.0.2151.58. It is, therefore, affected by multiple vulnerabilities as referenced in the November 9, 2023 advisory.

- Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability (CVE-2023-36014)

- Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability (CVE-2023-36024, CVE-2023-36027)

- Use after free in WebAudio in Google Chrome prior to 119.0.6045.123 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2023-5996)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 118.0.2088.102 / 119.0.2151.58 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.7 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0273
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.4 (CVSS2#E:U/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2023-36014
CVE CVE-2023-36024
CVE CVE-2023-36027
CVE CVE-2023-5996
XREF IAVA:2023-A-0610-S
Plugin Information
Published: 2023/11/09, Modified: 2024/05/03
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 119.0.2151.58
185901 - Microsoft Edge (Chromium) < 118.0.2088.109 / 119.0.2151.72 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 118.0.2088.109 / 119.0.2151.72. It is, therefore, affected by multiple vulnerabilities as referenced in the November 16, 2023 advisory.

- Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability (CVE-2023-36008)

- Microsoft Edge (Chromium-based) Spoofing Vulnerability (CVE-2023-36026)

- Use after free in Garbage Collection in Google Chrome prior to 119.0.6045.159 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2023-5997)

- Use after free in Navigation in Google Chrome prior to 119.0.6045.159 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2023-6112)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 118.0.2088.109 / 119.0.2151.72 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.9 (CVSS:3.0/E:P/RL:O/RC:C)
EPSS Score
0.2814
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.8 (CVSS2#E:POC/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2023-5997
CVE CVE-2023-6112
CVE CVE-2023-36008
CVE CVE-2023-36026
XREF IAVA:2023-A-0649-S
Plugin Information
Published: 2023/11/16, Modified: 2024/05/03
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 119.0.2151.72
186447 - Microsoft Edge (Chromium) < 118.0.2088.122 / 119.0.2151.97 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 118.0.2088.122 / 119.0.2151.97. It is, therefore, affected by multiple vulnerabilities as referenced in the November 29, 2023 advisory.

- Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a malicious file. (Chromium security severity: High) (CVE-2023-6345)

- Use after free in WebAudio in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2023-6346)

- Use after free in Mojo in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2023-6347)

- Type Confusion in Spellcheck in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2023-6348)

- Use after free in libavif in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap corruption via a crafted avif file. (Chromium security severity: High) (CVE-2023-6350, CVE-2023-6351)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 118.0.2088.122 / 119.0.2151.97 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
9.6 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
8.9 (CVSS:3.0/E:F/RL:O/RC:C)
EPSS Score
0.0398
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
8.3 (CVSS2#E:F/RL:OF/RC:C)
References
CVE CVE-2023-6345
CVE CVE-2023-6346
CVE CVE-2023-6347
CVE CVE-2023-6348
CVE CVE-2023-6350
CVE CVE-2023-6351
XREF CISA-KNOWN-EXPLOITED:2023/12/21
Plugin Information
Published: 2023/11/29, Modified: 2024/05/03
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 119.0.2151.97
183055 - Microsoft Edge (Chromium) < 118.0.2088.46 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by a vulnerability.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 118.0.2088.46. It is, therefore, affected by multiple vulnerabilities as referenced in the October 13, 2023 advisory.

- Use after free in Site Isolation in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical) (CVE-2023-5218)

- Use after free in Cast in Google Chrome prior to 118.0.5993.70 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Low) (CVE-2023-5473)

- Heap buffer overflow in PDF in Google Chrome prior to 118.0.5993.70 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: Medium) (CVE-2023-5474)

- Inappropriate implementation in DevTools in Google Chrome prior to 118.0.5993.70 allowed an attacker who convinced a user to install a malicious extension to bypass discretionary access control via a crafted Chrome Extension. (Chromium security severity: Medium) (CVE-2023-5475)

- Use after free in Blink History in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) (CVE-2023-5476)

- Inappropriate implementation in Installer in Google Chrome prior to 118.0.5993.70 allowed a local attacker to bypass discretionary access control via a crafted command. (Chromium security severity: Low) (CVE-2023-5477)

- Inappropriate implementation in Autofill in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low) (CVE-2023-5478)

- Inappropriate implementation in Extensions API in Google Chrome prior to 118.0.5993.70 allowed an attacker who convinced a user to install a malicious extension to bypass an enterprise policy via a crafted HTML page. (Chromium security severity: Medium) (CVE-2023-5479)

- Inappropriate implementation in Downloads in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to spoof security UI via a crafted HTML page. (Chromium security severity: Medium) (CVE-2023-5481)

- Inappropriate implementation in Intents in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Medium) (CVE-2023-5483)

- Inappropriate implementation in Navigation in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to spoof security UI via a crafted HTML page. (Chromium security severity: Medium) (CVE-2023-5484)

- Inappropriate implementation in Autofill in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to bypass autofill restrictions via a crafted HTML page. (Chromium security severity: Low) (CVE-2023-5485)

- Inappropriate implementation in Input in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to spoof security UI via a crafted HTML page. (Chromium security severity: Low) (CVE-2023-5486)

- Inappropriate implementation in Fullscreen in Google Chrome prior to 118.0.5993.70 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension. (Chromium security severity: Medium) (CVE-2023-5487)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 118.0.2088.46 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.7 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0361
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.4 (CVSS2#E:U/RL:OF/RC:C)
STIG Severity
I
References
Plugin Information
Published: 2023/10/13, Modified: 2023/11/09
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 118.0.2088.46
183979 - Microsoft Edge (Chromium) < 118.0.2088.76 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 118.0.2088.76. It is, therefore, affected by multiple vulnerabilities as referenced in the October 27, 2023 advisory.

- Use after free in Profiles in Google Chrome prior to 118.0.5993.117 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2023-5472)

- Use After Free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. (CVE-2023-44323)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 118.0.2088.76 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.7 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0185
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.4 (CVSS2#E:U/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2023-5472
CVE CVE-2023-44323
XREF IAVA:2023-A-0600-S
Plugin Information
Published: 2023/10/27, Modified: 2023/11/16
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 118.0.2088.76
184320 - Microsoft Edge (Chromium) < 118.0.2088.88 / 119.0.2151.44 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 118.0.2088.88 / 119.0.2151.44. It is, therefore, affected by multiple vulnerabilities as referenced in the November 2, 2023 advisory.

- Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability (CVE-2023-36022, CVE-2023-36034)

- Microsoft Edge (Chromium-based) Spoofing Vulnerability (CVE-2023-36029)

- Inappropriate implementation in Payments in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to bypass XSS preventions via a malicious file. (Chromium security severity: High) (CVE-2023-5480)

- Insufficient data validation in USB in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High) (CVE-2023-5482)

- Integer overflow in USB in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2023-5849)

- Incorrect security UI in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to perform domain spoofing via a crafted domain name. (Chromium security severity: Medium) (CVE-2023-5850)

- Inappropriate implementation in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to obfuscate security UI via a crafted HTML page. (Chromium security severity: Medium) (CVE-2023-5851)

- Use after free in Printing in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via specific UI gestures. (Chromium security severity: Medium) (CVE-2023-5852)

- Incorrect security UI in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to obfuscate security UI via a crafted HTML page. (Chromium security severity: Medium) (CVE-2023-5853)

- Use after free in Profiles in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via specific UI gestures. (Chromium security severity: Medium) (CVE-2023-5854)

- Use after free in Reading Mode in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via specific UI gestures. (Chromium security severity: Medium) (CVE-2023-5855)

- Use after free in Side Panel in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) (CVE-2023-5856)

- Inappropriate implementation in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to potentially execute arbitrary code via a malicious file. (Chromium security severity: Medium) (CVE-2023-5857)

- Inappropriate implementation in WebApp Provider in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to obfuscate security UI via a crafted HTML page. (Chromium security severity: Low) (CVE-2023-5858)

- Incorrect security UI in Picture In Picture in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to perform domain spoofing via a crafted local HTML page. (Chromium security severity: Low) (CVE-2023-5859)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 118.0.2088.88 / 119.0.2151.44 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.7 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.1386
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.4 (CVSS2#E:U/RL:OF/RC:C)
STIG Severity
I
References
Plugin Information
Published: 2023/11/03, Modified: 2024/05/03
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 119.0.2151.44
187660 - Microsoft Edge (Chromium) < 120.0.2210.121 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 120.0.2210.121. It is, therefore, affected by multiple vulnerabilities as referenced in the January 5, 2024 advisory.

- Use after free in ANGLE in Google Chrome prior to 120.0.6099.199 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2024-0222)

- Heap buffer overflow in ANGLE in Google Chrome prior to 120.0.6099.199 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2024-0223)

- Use after free in WebAudio in Google Chrome prior to 120.0.6099.199 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2024-0224)

- Use after free in WebGPU in Google Chrome prior to 120.0.6099.199 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2024-0225)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 120.0.2210.121 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.7 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0085
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.4 (CVSS2#E:U/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2024-0222
CVE CVE-2024-0223
CVE CVE-2024-0224
CVE CVE-2024-0225
XREF IAVA:2024-A-0009-S
Plugin Information
Published: 2024/01/05, Modified: 2024/05/03
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 120.0.2210.121
189126 - Microsoft Edge (Chromium) < 120.0.2210.144 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 120.0.2210.144. It is, therefore, affected by multiple vulnerabilities as referenced in the January 17, 2024 advisory.

- Out of bounds write in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2024-0517)

- Type confusion in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2024-0518)

- Out of bounds memory access in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2024-0519)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 120.0.2210.144 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
8.2 (CVSS:3.0/E:F/RL:O/RC:C)
EPSS Score
0.6601
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
8.3 (CVSS2#E:F/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2024-0517
CVE CVE-2024-0518
CVE CVE-2024-0519
XREF CISA-KNOWN-EXPLOITED:2024/02/07
XREF IAVA:2024-A-0040-S
Plugin Information
Published: 2024/01/17, Modified: 2024/05/03
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 120.0.2210.144
189605 - Microsoft Edge (Chromium) < 120.0.2210.160 / 121.0.2277.83 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 120.0.2210.160 / 121.0.2277.83. It is, therefore, affected by multiple vulnerabilities as referenced in the January 26, 2024 advisory.

- Insufficient policy enforcement in iOS Security UI in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium) (CVE-2024-0804)

- Inappropriate implementation in Downloads in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to perform domain spoofing via a crafted domain name. (Chromium security severity: Medium) (CVE-2024-0805)

- Use after free in Passwords in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit heap corruption via specific UI interaction. (Chromium security severity: Medium) (CVE-2024-0806)

- Use after free in Web Audio in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2024-0807)

- Integer underflow in WebUI in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit heap corruption via a malicious file. (Chromium security severity: High) (CVE-2024-0808)

- Inappropriate implementation in Autofill in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to bypass Autofill restrictions via a crafted HTML page. (Chromium security severity: Low) (CVE-2024-0809)

- Insufficient policy enforcement in DevTools in Google Chrome prior to 121.0.6167.85 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension. (Chromium security severity: Medium) (CVE-2024-0810)

- Inappropriate implementation in Extensions API in Google Chrome prior to 121.0.6167.85 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension. (Chromium security severity: Low) (CVE-2024-0811)

- Inappropriate implementation in Accessibility in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (Chromium security severity:
High) (CVE-2024-0812)

- Use after free in Reading Mode in Google Chrome prior to 121.0.6167.85 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via specific UI interaction.
(Chromium security severity: Medium) (CVE-2024-0813)

- Incorrect security UI in Payments in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially spoof security UI via a crafted HTML page. (Chromium security severity: Medium) (CVE-2024-0814)

- Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability (CVE-2024-21326, CVE-2024-21385, CVE-2024-21388)

- Microsoft Edge (Chromium-based) Spoofing Vulnerability (CVE-2024-21336, CVE-2024-21383)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 120.0.2210.160 / 121.0.2277.83 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
9.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
8.8 (CVSS:3.0/E:P/RL:O/RC:C)
EPSS Score
0.239
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.8 (CVSS2#E:POC/RL:OF/RC:C)
STIG Severity
I
References
Plugin Information
Published: 2024/01/25, Modified: 2024/05/17
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 121.0.2277.83
186681 - Microsoft Edge (Chromium) < 120.0.2210.61 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 120.0.2210.61. It is, therefore, affected by multiple vulnerabilities as referenced in the December 7, 2023 advisory.

- Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability (CVE-2023-35618)

- Microsoft Edge (Chromium-based) Information Disclosure Vulnerability (CVE-2023-36880, CVE-2023-38174)

- Use after free in Media Stream in Google Chrome prior to 120.0.6099.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2023-6508)

- Use after free in Side Panel Search in Google Chrome prior to 120.0.6099.62 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via specific UI interaction. (Chromium security severity: High) (CVE-2023-6509)

- Use after free in Media Capture in Google Chrome prior to 120.0.6099.62 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via specific UI interaction. (Chromium security severity: Medium) (CVE-2023-6510)

- Inappropriate implementation in Autofill in Google Chrome prior to 120.0.6099.62 allowed a remote attacker to bypass Autofill restrictions via a crafted HTML page. (Chromium security severity: Low) (CVE-2023-6511)

- Inappropriate implementation in Web Browser UI in Google Chrome prior to 120.0.6099.62 allowed a remote attacker to potentially spoof the contents of an iframe dialog context menu via a crafted HTML page.
(Chromium security severity: Low) (CVE-2023-6512)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 120.0.2210.61 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.7 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0236
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.4 (CVSS2#E:U/RL:OF/RC:C)
STIG Severity
I
References
Plugin Information
Published: 2023/12/07, Modified: 2025/01/01
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 120.0.2210.61
186985 - Microsoft Edge (Chromium) < 120.0.2210.77 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 120.0.2210.77. It is, therefore, affected by multiple vulnerabilities as referenced in the December 14, 2023 advisory.

- Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability (CVE-2023-36878)

- Type confusion in V8 in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2023-6702)

- Use after free in Blink in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2023-6703)

- Use after free in libavif in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially exploit heap corruption via a crafted image file. (Chromium security severity: High) (CVE-2023-6704)

- Use after free in WebRTC in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2023-6705)

- Use after free in FedCM in Google Chrome prior to 120.0.6099.109 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via a crafted HTML page.
(Chromium security severity: High) (CVE-2023-6706)

- Use after free in CSS in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) (CVE-2023-6707)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 120.0.2210.77 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.7 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.5169
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.4 (CVSS2#E:U/RL:OF/RC:C)
STIG Severity
I
References
Plugin Information
Published: 2023/12/15, Modified: 2024/05/03
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 120.0.2210.77
187184 - Microsoft Edge (Chromium) < 120.0.2210.91 (CVE-2023-7024)
-
Synopsis
The remote host has an web browser installed that is affected by a vulnerability.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 120.0.2210.91. It is, therefore, affected by a vulnerability as referenced in the December 21, 2023 advisory.

- Heap buffer overflow in WebRTC in Google Chrome prior to 120.0.6099.129 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2023-7024)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 120.0.2210.91 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
8.2 (CVSS:3.0/E:F/RL:O/RC:C)
EPSS Score
0.0766
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
8.3 (CVSS2#E:F/RL:OF/RC:C)
References
CVE CVE-2023-7024
XREF CISA-KNOWN-EXPLOITED:2024/01/23
Plugin Information
Published: 2023/12/21, Modified: 2024/05/03
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 120.0.2210.91
192634 - Microsoft Edge (Chromium) < 122.0.2365.113 / 123.0.2420.65 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 122.0.2365.113 / 123.0.2420.65. It is, therefore, affected by multiple vulnerabilities as referenced in the March 27, 2024 advisory.

- Use after free in ANGLE in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical) (CVE-2024-2883)

- Use after free in Dawn in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2024-2885)

- Use after free in WebCodecs in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High) (CVE-2024-2886)

- Type Confusion in WebAssembly in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High) (CVE-2024-2887)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 122.0.2365.113 / 123.0.2420.65 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.9 (CVSS:3.0/E:P/RL:O/RC:C)
EPSS Score
0.0724
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.8 (CVSS2#E:POC/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2024-2883
CVE CVE-2024-2885
CVE CVE-2024-2886
CVE CVE-2024-2887
XREF IAVA:2024-A-0177-S
Plugin Information
Published: 2024/03/27, Modified: 2024/12/20
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 123.0.2420.65
192932 - Microsoft Edge (Chromium) < 122.0.2365.120 / 123.0.2420.81 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 122.0.2365.120 / 123.0.2420.81. It is, therefore, affected by multiple vulnerabilities as referenced in the April 4, 2024 advisory.

- Microsoft Edge (Chromium-based) Webview2 Spoofing Vulnerability (CVE-2024-29049)

- Microsoft Edge (Chromium-based) Spoofing Vulnerability (CVE-2024-29981)

- Inappropriate implementation in V8 in Google Chrome prior to 123.0.6312.105 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity:
High) (CVE-2024-3156)

- Use after free in Bookmarks in Google Chrome prior to 123.0.6312.105 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2024-3158)

- Out of bounds memory access in V8 in Google Chrome prior to 123.0.6312.105 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High) (CVE-2024-3159)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 122.0.2365.120 / 123.0.2420.81 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.7 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.043
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.4 (CVSS2#E:U/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2024-3156
CVE CVE-2024-3158
CVE CVE-2024-3159
CVE CVE-2024-29049
CVE CVE-2024-29981
XREF IAVA:2024-A-0204-S
Plugin Information
Published: 2024/04/04, Modified: 2024/05/03
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 123.0.2420.81
191023 - Microsoft Edge (Chromium) < 122.0.2365.52 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 122.0.2365.52. It is, therefore, affected by multiple vulnerabilities as referenced in the February 23, 2024 advisory.

- Out of bounds memory access in Blink in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High) (CVE-2024-1669)

- Use after free in Mojo in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2024-1670)

- Inappropriate implementation in Site Isolation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Medium) (CVE-2024-1671)

- Inappropriate implementation in Content Security Policy in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity:
Medium) (CVE-2024-1672)

- Use after free in Accessibility in Google Chrome prior to 122.0.6261.57 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via specific UI gestures.
(Chromium security severity: Medium) (CVE-2024-1673)

- Inappropriate implementation in Navigation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium) (CVE-2024-1674)

- Insufficient policy enforcement in Download in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page. (Chromium security severity: Medium) (CVE-2024-1675)

- Inappropriate implementation in Navigation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to spoof security UI via a crafted HTML page. (Chromium security severity: Low) (CVE-2024-1676)

- Microsoft Edge (Chromium-based) Information Disclosure Vulnerability (CVE-2024-21423, CVE-2024-26192)

- Microsoft Edge (Chromium-based) Spoofing Vulnerability (CVE-2024-26188)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 122.0.2365.52 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.9 (CVSS:3.0/E:P/RL:O/RC:C)
EPSS Score
0.0808
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.8 (CVSS2#E:POC/RL:OF/RC:C)
STIG Severity
I
References
Plugin Information
Published: 2024/02/26, Modified: 2024/12/05
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 122.0.2365.52
191442 - Microsoft Edge (Chromium) < 122.0.2365.63 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 122.0.2365.63. It is, therefore, affected by multiple vulnerabilities as referenced in the February 29, 2024 advisory.

- Type Confusion in V8 in Google Chrome prior to 122.0.6261.94 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2024-1938)

- Type Confusion in V8 in Google Chrome prior to 122.0.6261.94 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2024-1939)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 122.0.2365.63 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.9 (CVSS:3.0/E:P/RL:O/RC:C)
EPSS Score
0.2737
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.8 (CVSS2#E:POC/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2024-1938
CVE CVE-2024-1939
XREF IAVA:2024-A-0116-S
Plugin Information
Published: 2024/02/29, Modified: 2024/12/20
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 122.0.2365.63
191717 - Microsoft Edge (Chromium) < 122.0.2365.80 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 122.0.2365.80. It is, therefore, affected by multiple vulnerabilities as referenced in the March 7, 2024 advisory.

- Out of bounds memory access in V8 in Google Chrome prior to 122.0.6261.111 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High) (CVE-2024-2173)

- Inappropriate implementation in V8 in Google Chrome prior to 122.0.6261.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2024-2174)

- Use after free in FedCM in Google Chrome prior to 122.0.6261.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2024-2176)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 122.0.2365.80 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.9 (CVSS:3.0/E:P/RL:O/RC:C)
EPSS Score
0.0046
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.8 (CVSS2#E:POC/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2024-2173
CVE CVE-2024-2174
CVE CVE-2024-2176
XREF IAVA:2024-A-0143-S
XREF IAVA:2024-A-0173-S
Plugin Information
Published: 2024/03/07, Modified: 2024/12/20
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 122.0.2365.80
192123 - Microsoft Edge (Chromium) < 122.0.2365.92 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 122.0.2365.92. It is, therefore, affected by multiple vulnerabilities as referenced in the March 14, 2024 advisory.

- Use after free in Performance Manager in Google Chrome prior to 122.0.6261.128 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2024-2400)

- Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability (CVE-2024-26163, CVE-2024-26246)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 122.0.2365.92 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.9 (CVSS:3.0/E:P/RL:O/RC:C)
EPSS Score
0.0174
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.8 (CVSS2#E:POC/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2024-2400
CVE CVE-2024-26163
CVE CVE-2024-26246
XREF IAVA:2024-A-0173-S
Plugin Information
Published: 2024/03/14, Modified: 2024/12/20
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 122.0.2365.92
192478 - Microsoft Edge (Chromium) < 123.0.2420.53 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 123.0.2420.53. It is, therefore, affected by multiple vulnerabilities as referenced in the March 22, 2024 advisory.

- Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability (CVE-2024-26247)

- Object lifecycle issue in V8 in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2024-2625)

- Out of bounds read in Swiftshader in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Medium) (CVE-2024-2626)

- Use after free in Canvas in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) (CVE-2024-2627)

- Inappropriate implementation in Downloads in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to perform UI spoofing via a crafted URL. (Chromium security severity: Medium) (CVE-2024-2628)

- Incorrect security UI in iOS in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) (CVE-2024-2629)

- Inappropriate implementation in iOS in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium) (CVE-2024-2630)

- Inappropriate implementation in iOS in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low) (CVE-2024-2631)

- Microsoft Edge (Chromium-based) Spoofing Vulnerability (CVE-2024-29057)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 123.0.2420.53 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.7 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0218
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.4 (CVSS2#E:U/RL:OF/RC:C)
STIG Severity
I
References
Plugin Information
Published: 2024/03/22, Modified: 2024/05/03
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 123.0.2420.53
193282 - Microsoft Edge (Chromium) < 123.0.2420.97 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 123.0.2420.97. It is, therefore, affected by multiple vulnerabilities as referenced in the April 12, 2024 advisory.

- Out of bounds memory access in Compositing in Google Chrome prior to 123.0.6312.122 allowed a remote attacker who had compromised the GPU process to potentially perform a sandbox escape via specific UI gestures. (Chromium security severity: High) (CVE-2024-3157)

- Use after free in Dawn in Google Chrome prior to 123.0.6312.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2024-3515)

- Heap buffer overflow in ANGLE in Google Chrome prior to 123.0.6312.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2024-3516)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 123.0.2420.97 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
9.6 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
8.6 (CVSS:3.0/E:P/RL:O/RC:C)
EPSS Score
0.0068
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.8 (CVSS2#E:POC/RL:OF/RC:C)
References
Plugin Information
Published: 2024/04/12, Modified: 2024/12/20
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 123.0.2420.97
197034 - Microsoft Edge (Chromium) < 124.0.2478.105 (CVE-2024-4761)
-
Synopsis
The remote host has an web browser installed that is affected by a vulnerability.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 124.0.2478.105. It is, therefore, affected by a vulnerability as referenced in the May 14, 2024 advisory.

- Out of bounds write in V8 in Google Chrome prior to 124.0.6367.207 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High) (CVE-2024-4761)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 124.0.2478.105 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
8.2 (CVSS:3.0/E:F/RL:O/RC:C)
EPSS Score
0.0494
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
8.3 (CVSS2#E:F/RL:OF/RC:C)
References
CVE CVE-2024-4761
XREF CISA-KNOWN-EXPLOITED:2024/06/06
Plugin Information
Published: 2024/05/14, Modified: 2024/05/21
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 124.0.2478.105
197287 - Microsoft Edge (Chromium) < 124.0.2478.109 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 124.0.2478.109. It is, therefore, affected by multiple vulnerabilities as referenced in the May 16, 2024 advisory.

- Microsoft Edge (Chromium-based) Information Disclosure Vulnerability (CVE-2024-30056)

- Type Confusion in V8 in Google Chrome prior to 125.0.6422.60 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High) (CVE-2024-4947)

- Use after free in Dawn in Google Chrome prior to 125.0.6422.60 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2024-4948)

- Use after free in V8 in Google Chrome prior to 125.0.6422.60 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) (CVE-2024-4949)

- Inappropriate implementation in Downloads in Google Chrome prior to 125.0.6422.60 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low) (CVE-2024-4950)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 124.0.2478.109 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
9.6 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
8.9 (CVSS:3.0/E:F/RL:O/RC:C)
EPSS Score
0.1343
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
8.3 (CVSS2#E:F/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2024-4947
CVE CVE-2024-4948
CVE CVE-2024-4949
CVE CVE-2024-4950
CVE CVE-2024-30056
XREF CISA-KNOWN-EXPLOITED:2024/06/10
XREF IAVA:2024-A-0306-S
Plugin Information
Published: 2024/05/17, Modified: 2024/11/28
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 124.0.2478.109
193518 - Microsoft Edge (Chromium) < 124.0.2478.51 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 124.0.2478.51. It is, therefore, affected by multiple vulnerabilities as referenced in the April 18, 2024 advisory.

- Microsoft Edge for Android (Chromium-based) Information Disclosure Vulnerability (CVE-2024-29986)

- Microsoft Edge (Chromium-based) Information Disclosure Vulnerability (CVE-2024-29987)

- Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability (CVE-2024-29991)

- Object corruption in V8 in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2024-3832)

- Object corruption in WebAssembly in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2024-3833)

- Use after free in Downloads in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2024-3834)

- Use after free in QUIC in Google Chrome prior to 124.0.6367.60 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) (CVE-2024-3837)

- Inappropriate implementation in Autofill in Google Chrome prior to 124.0.6367.60 allowed an attacker who convinced a user to install a malicious app to perform UI spoofing via a crafted app. (Chromium security severity: Medium) (CVE-2024-3838)

- Out of bounds read in Fonts in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium) (CVE-2024-3839)

- Insufficient policy enforcement in Site Isolation in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium) (CVE-2024-3840)

- Insufficient data validation in Browser Switcher in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to inject scripts or HTML into a privileged page via a malicious file. (Chromium security severity: Medium) (CVE-2024-3841)

- Insufficient data validation in Downloads in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) (CVE-2024-3843)

- Inappropriate implementation in Extensions in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to perform UI spoofing via a crafted Chrome Extension. (Chromium security severity: Low) (CVE-2024-3844)

- Inappropriate implementation in Networks in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to bypass mixed content policy via a crafted HTML page. (Chromium security severity: Low) (CVE-2024-3845)

- Inappropriate implementation in Prompts in Google Chrome prior to 124.0.6367.60 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page.
(Chromium security severity: Low) (CVE-2024-3846)

- Insufficient policy enforcement in WebUI in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Low) (CVE-2024-3847)

- Use after free in V8 in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2024-3914)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 124.0.2478.51 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.9 (CVSS:3.0/E:P/RL:O/RC:C)
EPSS Score
0.0126
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.8 (CVSS2#E:POC/RL:OF/RC:C)
STIG Severity
I
References
Plugin Information
Published: 2024/04/18, Modified: 2024/12/20
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 124.0.2478.51
193962 - Microsoft Edge (Chromium) < 124.0.2478.67 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 124.0.2478.67. It is, therefore, affected by multiple vulnerabilities as referenced in the April 26, 2024 advisory.

- Type confusion in ANGLE in Google Chrome prior to 124.0.6367.78 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical) (CVE-2024-4058)

- Out of bounds read in V8 API in Google Chrome prior to 124.0.6367.78 allowed a remote attacker to leak cross-site data via a crafted HTML page. (Chromium security severity: High) (CVE-2024-4059)

- Use after free in Dawn in Google Chrome prior to 124.0.6367.78 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2024-4060)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 124.0.2478.67 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.9 (CVSS:3.0/E:P/RL:O/RC:C)
EPSS Score
0.0056
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.8 (CVSS2#E:POC/RL:OF/RC:C)
References
Plugin Information
Published: 2024/04/26, Modified: 2024/12/20
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 124.0.2478.67
194943 - Microsoft Edge (Chromium) < 124.0.2478.80 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 124.0.2478.80. It is, therefore, affected by multiple vulnerabilities as referenced in the May 2, 2024 advisory.

- Use after free in Picture In Picture in Google Chrome prior to 124.0.6367.118 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2024-4331)

- Use after free in Dawn in Google Chrome prior to 124.0.6367.118 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2024-4368)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 124.0.2478.80 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.9 (CVSS:3.0/E:P/RL:O/RC:C)
EPSS Score
0.0096
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.8 (CVSS2#E:POC/RL:OF/RC:C)
References
Plugin Information
Published: 2024/05/02, Modified: 2024/12/23
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 124.0.2478.80
195318 - Microsoft Edge (Chromium) < 124.0.2478.97 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 124.0.2478.97. It is, therefore, affected by multiple vulnerabilities as referenced in the May 10, 2024 advisory.

- Microsoft Edge (Chromium-based) Spoofing Vulnerability (CVE-2024-30055)

- Use after free in ANGLE in Google Chrome prior to 124.0.6367.155 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2024-4558)

- Heap buffer overflow in WebAudio in Google Chrome prior to 124.0.6367.155 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2024-4559)

- Use after free in Visuals in Google Chrome prior to 124.0.6367.201 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
(Chromium security severity: High) (CVE-2024-4671)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 124.0.2478.97 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
9.6 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
8.9 (CVSS:3.0/E:F/RL:O/RC:C)
EPSS Score
0.0614
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
8.3 (CVSS2#E:F/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2024-4558
CVE CVE-2024-4559
CVE CVE-2024-4671
CVE CVE-2024-30055
XREF CISA-KNOWN-EXPLOITED:2024/06/03
XREF IAVA:2024-A-0274-S
Plugin Information
Published: 2024/05/10, Modified: 2024/05/24
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 124.0.2478.97
202467 - Microsoft Edge (Chromium) < 125.0.2535.67 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 125.0.2535.67. It is, therefore, affected by multiple vulnerabilities as referenced in the May 16, 2024 advisory.

- Use after free in Scheduling in Google Chrome prior to 125.0.6422.76 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High) (CVE-2024-5157)

- Type Confusion in V8 in Google Chrome prior to 125.0.6422.76 allowed a remote attacker to potentially perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High) (CVE-2024-5158)

- Heap buffer overflow in ANGLE in Google Chrome prior to 125.0.6422.76 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: High) (CVE-2024-5159)

- Heap buffer overflow in Dawn in Google Chrome prior to 125.0.6422.76 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High) (CVE-2024-5160)

- Type Confusion in V8. (CVE-2024-5274)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 125.0.2535.67 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
9.6 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
8.9 (CVSS:3.0/E:F/RL:O/RC:C)
EPSS Score
0.0331
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
8.3 (CVSS2#E:F/RL:OF/RC:C)
References
CVE CVE-2024-5157
CVE CVE-2024-5158
CVE CVE-2024-5159
CVE CVE-2024-5160
CVE CVE-2024-5274
XREF CISA-KNOWN-EXPLOITED:2024/06/18
Plugin Information
Published: 2024/07/16, Modified: 2024/11/28
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 125.0.2535.67
200060 - Microsoft Edge (Chromium) < 125.0.2535.85 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 125.0.2535.85. It is, therefore, affected by multiple vulnerabilities as referenced in the June 3, 2024 advisory.

- Heap buffer overflow in WebRTC in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2024-5493)

- Use after free in Dawn in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2024-5494, CVE-2024-5495)

- Use after free in Media Session in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High) (CVE-2024-5496)

- Out of bounds memory access in Keyboard Inputs in Google Chrome prior to 125.0.6422.141 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2024-5497)

- Use after free in Presentation API in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2024-5498)

- Out of bounds write in Streams API in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High) (CVE-2024-5499)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 125.0.2535.85 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.9 (CVSS:3.0/E:P/RL:O/RC:C)
EPSS Score
0.0074
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.8 (CVSS2#E:POC/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2024-5493
CVE CVE-2024-5494
CVE CVE-2024-5495
CVE CVE-2024-5496
CVE CVE-2024-5497
CVE CVE-2024-5498
CVE CVE-2024-5499
XREF IAVA:2024-A-0342-S
XREF IAVA:2024-A-0371-S
Plugin Information
Published: 2024/06/03, Modified: 2025/01/01
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 125.0.2535.85
202635 - Microsoft Edge (Chromium) < 126.0.2592.113 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 126.0.2592.113. It is, therefore, affected by multiple vulnerabilities as referenced in the July 18, 2024 advisory.

- Inappropriate implementation in V8 in Google Chrome prior to 126.0.6478.182 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High) (CVE-2024-6772)

- Inappropriate implementation in V8 in Google Chrome prior to 126.0.6478.182 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2024-6773)

- Use after free in Screen Capture in Google Chrome prior to 126.0.6478.182 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2024-6774)

- Use after free in Media Stream in Google Chrome prior to 126.0.6478.182 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2024-6775)

- Use after free in Audio in Google Chrome prior to 126.0.6478.182 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2024-6776)

- Use after free in Navigation in Google Chrome prior to 126.0.6478.182 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security severity: High) (CVE-2024-6777)

- Race in DevTools in Google Chrome prior to 126.0.6478.182 allowed an attacker who convinced a user to install a malicious extension to inject scripts or HTML into a privileged page via a crafted Chrome Extension. (Chromium security severity: High) (CVE-2024-6778)

- Out of bounds memory access in V8 in Google Chrome prior to 126.0.6478.182 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High) (CVE-2024-6779)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 126.0.2592.113 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
9.6 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
8.6 (CVSS:3.0/E:P/RL:O/RC:C)
EPSS Score
0.1367
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.8 (CVSS2#E:POC/RL:OF/RC:C)
References
Plugin Information
Published: 2024/07/18, Modified: 2024/12/31
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 126.0.2592.113
200498 - Microsoft Edge (Chromium) < 126.0.2592.56 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 126.0.2592.56. It is, therefore, affected by multiple vulnerabilities as referenced in the June 13, 2024 advisory.

- Microsoft Edge (Chromium-based) Spoofing Vulnerability (CVE-2024-30058, CVE-2024-38083)

- Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High) (CVE-2024-5830)

- Use after free in Dawn in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2024-5831, CVE-2024-5832)

- Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High) (CVE-2024-5833, CVE-2024-5837)

- Inappropriate implementation in Dawn in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High) (CVE-2024-5834)

- Heap buffer overflow in Tab Groups in Google Chrome prior to 126.0.6478.54 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2024-5835)

- Inappropriate Implementation in DevTools in Google Chrome prior to 126.0.6478.54 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension. (Chromium security severity: High) (CVE-2024-5836)

- Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High) (CVE-2024-5838)

- Inappropriate Implementation in Memory Allocator in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity:
Medium) (CVE-2024-5839)

- Policy bypass in CORS in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to bypass discretionary access control via a crafted HTML page. (Chromium security severity: Medium) (CVE-2024-5840)

- Use after free in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) (CVE-2024-5841)

- Use after free in Browser UI in Google Chrome prior to 126.0.6478.54 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium) (CVE-2024-5842)

- Inappropriate implementation in Downloads in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to obfuscate security UI via a malicious file. (Chromium security severity: Medium) (CVE-2024-5843)

- Heap buffer overflow in Tab Strip in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium) (CVE-2024-5844)

- Use after free in Audio in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: Medium) (CVE-2024-5845)

- Use after free in PDFium in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: Medium) (CVE-2024-5846, CVE-2024-5847)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 126.0.2592.56 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.9 (CVSS:3.0/E:P/RL:O/RC:C)
EPSS Score
0.0619
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.8 (CVSS2#E:POC/RL:OF/RC:C)
STIG Severity
I
References
Plugin Information
Published: 2024/06/13, Modified: 2024/08/16
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 126.0.2592.56
200793 - Microsoft Edge (Chromium) < 126.0.2592.68 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 126.0.2592.68. It is, therefore, affected by multiple vulnerabilities as referenced in the June 20, 2024 advisory.

- Microsoft Edge (Chromium-based) Spoofing Vulnerability (CVE-2024-38082, CVE-2024-38093)

- Type Confusion in V8 in Google Chrome prior to 126.0.6478.114 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High) (CVE-2024-6100)

- Inappropriate implementation in V8 in Google Chrome prior to 126.0.6478.114 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High) (CVE-2024-6101)

- Out of bounds memory access in Dawn in Google Chrome prior to 126.0.6478.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2024-6102)

- Use after free in Dawn in Google Chrome prior to 126.0.6478.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2024-6103)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 126.0.2592.68 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.7 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0154
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.4 (CVSS2#E:U/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2024-6100
CVE CVE-2024-6101
CVE CVE-2024-6102
CVE CVE-2024-6103
CVE CVE-2024-38082
CVE CVE-2024-38093
XREF IAVA:2024-A-0365-S
XREF IAVA:2024-A-0371-S
Plugin Information
Published: 2024/06/20, Modified: 2024/07/12
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 126.0.2592.68
201115 - Microsoft Edge (Chromium) < 126.0.2592.81 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 126.0.2592.81. It is, therefore, affected by multiple vulnerabilities as referenced in the June 27, 2024 advisory.

- Acrobat for Edge versions 126.0.2592.68 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure.
An attacker could leverage this vulnerability to execute code in the context of the current user.
Exploitation of this issue requires user interaction in that a victim must open a malicious file.
(CVE-2024-34122)

- Use after free in Dawn in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2024-6290, CVE-2024-6292, CVE-2024-6293)

- Use after free in Swiftshader in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2024-6291)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 126.0.2592.81 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.9 (CVSS:3.0/E:P/RL:O/RC:C)
EPSS Score
0.0059
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.8 (CVSS2#E:POC/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2024-6290
CVE CVE-2024-6291
CVE CVE-2024-6292
CVE CVE-2024-6293
CVE CVE-2024-34122
XREF IAVA:2024-A-0401-S
Plugin Information
Published: 2024/06/27, Modified: 2024/12/31
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 126.0.2592.81
204747 - Microsoft Edge (Chromium) < 127.0.2651.74 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 127.0.2651.74. It is, therefore, affected by multiple vulnerabilities as referenced in the July 25, 2024 advisory.

- Microsoft Edge (Chromium-based) Information Disclosure Vulnerability (CVE-2024-38103)

- Use after free in Downloads. (CVE-2024-6988)

- Use after free in Loader. (CVE-2024-6989)

- Use after free in Dawn. (CVE-2024-6991)

- The vulnerability exists due to a boundary error when processing untrusted input in ANGLE. A remote attacker can create a specially crafted web page, trick the victim into visiting it, trigger out-of-bounds write and execute arbitrary code on the target system. (CVE-2024-6992)

- The vulnerability exists due to inappropriate implementation in Canvas. A remote attacker can create a specially crafted web page, trick the victim into visiting it and gain unauthorized access to the system.
(CVE-2024-6993)

- Heap buffer overflow in Layout. (CVE-2024-6994)

- Inappropriate implementation in Fullscreen. (CVE-2024-6995)

- Race in Frames. (CVE-2024-6996)

- Use after free in Tabs. (CVE-2024-6997)

- Use after free in User Education. (CVE-2024-6998)

- Inappropriate implementation in FedCM. (CVE-2024-6999, CVE-2024-7003)

- Use after free in CSS. (CVE-2024-7000)

- Inappropriate implementation in HTML. (CVE-2024-7001)

- Insufficient validation of untrusted input in Safe Browsing. (CVE-2024-7004, CVE-2024-7005)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 127.0.2651.74 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.7 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0041
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.4 (CVSS2#E:U/RL:OF/RC:C)
STIG Severity
I
References
Plugin Information
Published: 2024/07/25, Modified: 2024/08/16
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 127.0.2651.74
204961 - Microsoft Edge (Chromium) < 127.0.2651.86 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 127.0.2651.86. It is, therefore, affected by multiple vulnerabilities as referenced in the August 1, 2024 advisory.

- Uninitialized Use in Dawn in Google Chrome on Android prior to 127.0.6533.88 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity:
Critical) (CVE-2024-6990)

- Out of bounds read in WebTransport in Google Chrome prior to 127.0.6533.88 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity:
High) (CVE-2024-7255)

- Insufficient data validation in Dawn in Google Chrome on Android prior to 127.0.6533.88 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High) (CVE-2024-7256)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 127.0.2651.86 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.9 (CVSS:3.0/E:P/RL:O/RC:C)
EPSS Score
0.0024
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.8 (CVSS2#E:POC/RL:OF/RC:C)
References
Plugin Information
Published: 2024/08/01, Modified: 2025/01/06
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 127.0.2651.86
205222 - Microsoft Edge (Chromium) < 127.0.2651.98 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 127.0.2651.98. It is, therefore, affected by multiple vulnerabilities as referenced in the August 8, 2024 advisory.

- Out of bounds memory access in ANGLE in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical) (CVE-2024-7532)

- Use after free in Sharing in Google Chrome on iOS prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2024-7533)

- Heap buffer overflow in Layout in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2024-7534)

- Inappropriate implementation in V8 in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2024-7535)

- Use after free in WebAudio in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2024-7536)

- Type Confusion in V8 in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2024-7550)

- Microsoft Edge (HTML-based) Memory Corruption Vulnerability (CVE-2024-38218)

- Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability (CVE-2024-38219)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 127.0.2651.98 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
9.0 (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.8 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0047
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.4 (CVSS2#E:U/RL:OF/RC:C)
STIG Severity
I
References
Plugin Information
Published: 2024/08/08, Modified: 2024/08/30
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 127.0.2651.98
206172 - Microsoft Edge (Chromium) < 128.0.2739.42 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 128.0.2739.42. It is, therefore, affected by multiple vulnerabilities as referenced in the August 22, 2024 advisory.

- Microsoft Edge (HTML-based) Memory Corruption Vulnerability (CVE-2024-38207)

- Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability (CVE-2024-38209, CVE-2024-38210)

- Use after free in Passwords in Google Chrome on Android prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2024-7964)

- Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2024-7965)

- Out of bounds memory access in Skia in Google Chrome prior to 128.0.6613.84 allowed a remote attacker who had compromised the renderer process to perform out of bounds memory access via a crafted HTML page.
(Chromium security severity: High) (CVE-2024-7966)

- Heap buffer overflow in Fonts in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2024-7967)

- Use after free in Autofill in Google Chrome prior to 128.0.6613.84 allowed a remote attacker who had convinced the user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2024-7968)

- Type Confusion in V8 in Google Chrome prior to 128.0.6613.113 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2024-7969)

- Type confusion in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2024-7971)

- Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity:
Medium) (CVE-2024-7972)

- Heap buffer overflow in PDFium in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file. (Chromium security severity: Medium) (CVE-2024-7973)

- Insufficient data validation in V8 API in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security severity:
Medium) (CVE-2024-7974)

- Inappropriate implementation in Permissions in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) (CVE-2024-7975)

- Inappropriate implementation in FedCM in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) (CVE-2024-7976)

- Insufficient data validation in Installer in Google Chrome on Windows prior to 128.0.6613.84 allowed a local attacker to perform privilege escalation via a malicious file. (Chromium security severity: Medium) (CVE-2024-7977)

- Insufficient policy enforcement in Data Transfer in Google Chrome prior to 128.0.6613.84 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium) (CVE-2024-7978)

- Insufficient data validation in Installer in Google Chrome on Windows prior to 128.0.6613.84 allowed a local attacker to perform privilege escalation via a crafted symbolic link. (Chromium security severity:
Medium) (CVE-2024-7979, CVE-2024-7980)

- Inappropriate implementation in Views in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low) (CVE-2024-7981)

- Inappropriate implementation in WebApp Installs in Google Chrome on Windows prior to 128.0.6613.84 allowed an attacker who convinced a user to install a malicious application to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low) (CVE-2024-8033)

- Inappropriate implementation in Custom Tabs in Google Chrome on Android prior to 128.0.6613.84 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low) (CVE-2024-8034)

- Inappropriate implementation in Extensions in Google Chrome on Windows prior to 128.0.6613.84 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low) (CVE-2024-8035)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
http://www.nessus.org/u?fcd44e19
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38207
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38209
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38210
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-7964
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-7965
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-7966
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-7967
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-7968
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-7969
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-7971
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-7972
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-7973
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-7974
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-7975
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-7976
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-7977
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-7978
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-7979
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-7980
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-7981
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-8033
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-8034
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-8035
Solution
Upgrade to Microsoft Edge version 128.0.2739.42 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
9.6 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
8.9 (CVSS:3.0/E:F/RL:O/RC:C)
EPSS Score
0.228
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
8.3 (CVSS2#E:F/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2024-7964
CVE CVE-2024-7965
CVE CVE-2024-7966
CVE CVE-2024-7967
CVE CVE-2024-7968
CVE CVE-2024-7969
CVE CVE-2024-7971
CVE CVE-2024-7972
CVE CVE-2024-7973
CVE CVE-2024-7974
CVE CVE-2024-7975
CVE CVE-2024-7976
CVE CVE-2024-7977
CVE CVE-2024-7978
CVE CVE-2024-7979
CVE CVE-2024-7980
CVE CVE-2024-7981
CVE CVE-2024-8033
CVE CVE-2024-8034
CVE CVE-2024-8035
CVE CVE-2024-38207
CVE CVE-2024-38209
CVE CVE-2024-38210
XREF CISA-KNOWN-EXPLOITED:2024/09/18
XREF CISA-KNOWN-EXPLOITED:2024/09/16
XREF IAVA:2024-A-0524-S
Plugin Information
Published: 2024/08/23, Modified: 2024/11/28
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 128.0.2739.42
207866 - Microsoft Edge (Chromium) < 128.0.2739.97 / 129.0.2792.65 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 128.0.2739.97 / 129.0.2792.65. It is, therefore, affected by multiple vulnerabilities as referenced in the September 26, 2024 advisory.

- Use after free in Dawn in Google Chrome on Windows prior to 129.0.6668.70 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2024-9120)

- Inappropriate implementation in V8 in Google Chrome prior to 129.0.6668.70 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity:
High) (CVE-2024-9121)

- Type Confusion in V8 in Google Chrome prior to 129.0.6668.70 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High) (CVE-2024-9122)

- Integer overflow in Skia in Google Chrome prior to 129.0.6668.70 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High) (CVE-2024-9123)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 128.0.2739.97 / 129.0.2792.65 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.9 (CVSS:3.0/E:P/RL:O/RC:C)
EPSS Score
0.004
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.8 (CVSS2#E:POC/RL:OF/RC:C)
References
Plugin Information
Published: 2024/09/27, Modified: 2025/01/03
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 129.0.2792.65
208101 - Microsoft Edge (Chromium) < 129.0.2792.79 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 129.0.2792.79. It is, therefore, affected by multiple vulnerabilities as referenced in the October 3, 2024 advisory.

- Integer overflow in Layout. (CVE-2024-7025)

- Insufficient data validation in Mojo. (CVE-2024-9369)

- Inappropriate implementation in V8. (CVE-2024-9370)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 129.0.2792.79 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
9.6 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
8.6 (CVSS:3.0/E:P/RL:O/RC:C)
EPSS Score
0.001
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.8 (CVSS2#E:POC/RL:OF/RC:C)
References
Plugin Information
Published: 2024/10/03, Modified: 2025/01/03
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 129.0.2792.79
208710 - Microsoft Edge (Chromium) < 129.0.2792.89 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 129.0.2792.89. It is, therefore, affected by multiple vulnerabilities as referenced in the October 10, 2024 advisory.

- Type Confusion in V8 in Google Chrome prior to 129.0.6668.100 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High) (CVE-2024-9602)

- Type Confusion in V8 in Google Chrome prior to 129.0.6668.100 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2024-9603)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 129.0.2792.89 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.9 (CVSS:3.0/E:P/RL:O/RC:C)
EPSS Score
0.0022
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.8 (CVSS2#E:POC/RL:OF/RC:C)
References
Plugin Information
Published: 2024/10/10, Modified: 2025/01/03
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 129.0.2792.89
212712 - Microsoft Edge (Chromium) < 130.0.2849.116 / 131.0.2903.99 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 130.0.2849.116 / 131.0.2903.99. It is, therefore, affected by multiple vulnerabilities as referenced in the December 12, 2024 advisory.

- Use after free in Translate in Google Chrome prior to 131.0.6778.139 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2024-12382)

- Type Confusion in V8 in Google Chrome prior to 131.0.6778.139 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2024-12381)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 130.0.2849.116 / 131.0.2903.99 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.7 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0009
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.4 (CVSS2#E:U/RL:OF/RC:C)
References
Plugin Information
Published: 2024/12/12, Modified: 2024/12/13
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 131.0.2903.99
213260 - Microsoft Edge (Chromium) < 130.0.2849.123 / 131.0.2903.112 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 130.0.2849.123 / 131.0.2903.112. It is, therefore, affected by multiple vulnerabilities as referenced in the December 19, 2024 advisory.

- Out of bounds write in V8 in Google Chrome prior to 131.0.6778.204 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High) (CVE-2024-12695)

- Type Confusion in V8 in Google Chrome prior to 131.0.6778.204 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2024-12692)

- Out of bounds memory access in V8 in Google Chrome prior to 131.0.6778.204 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High) (CVE-2024-12693)

- Use after free in Compositing in Google Chrome prior to 131.0.6778.204 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2024-12694)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 130.0.2849.123 / 131.0.2903.112 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.7 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0019
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.4 (CVSS2#E:U/RL:OF/RC:C)
References
Plugin Information
Published: 2024/12/19, Modified: 2025/02/12
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 131.0.2903.112
209257 - Microsoft Edge (Chromium) < 130.0.2849.46 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 130.0.2849.46. It is, therefore, affected by multiple vulnerabilities as referenced in the October 17, 2024 advisory.

- Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability (CVE-2024-43566, CVE-2024-43578, CVE-2024-43579, CVE-2024-43587, CVE-2024-43595, CVE-2024-43596, CVE-2024-49023)

- Microsoft Edge (Chromium-based) Spoofing Vulnerability (CVE-2024-43577, CVE-2024-43580)

- Use after free in AI in Google Chrome prior to 130.0.6723.58 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2024-9954)

- Use after free in WebAuthentication in Google Chrome prior to 130.0.6723.58 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) (CVE-2024-9955)

- Inappropriate implementation in WebAuthentication in Google Chrome on Android prior to 130.0.6723.58 allowed a local attacker to perform privilege escalation via a crafted HTML page. (Chromium security severity: Medium) (CVE-2024-9956)

- Use after free in UI in Google Chrome on iOS prior to 130.0.6723.58 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) (CVE-2024-9957)

- Inappropriate implementation in PictureInPicture in Google Chrome prior to 130.0.6723.58 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) (CVE-2024-9958)

- Use after free in DevTools in Google Chrome prior to 130.0.6723.58 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted Chrome Extension.
(Chromium security severity: Medium) (CVE-2024-9959)

- Use after free in Dawn in Google Chrome prior to 130.0.6723.58 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) (CVE-2024-9960)

- Use after free in ParcelTracking in Google Chrome on iOS prior to 130.0.6723.58 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) (CVE-2024-9961)

- Inappropriate implementation in Permissions in Google Chrome prior to 130.0.6723.58 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) (CVE-2024-9962)

- Insufficient data validation in Downloads in Google Chrome prior to 130.0.6723.58 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) (CVE-2024-9963)

- Inappropriate implementation in Payments in Google Chrome prior to 130.0.6723.58 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted Chrome Extension. (Chromium security severity: Low) (CVE-2024-9964)

- Insufficient data validation in DevTools in Google Chrome on Windows prior to 130.0.6723.58 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. (Chromium security severity: Low) (CVE-2024-9965)

- Inappropriate implementation in Navigations in Google Chrome prior to 130.0.6723.58 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Low) (CVE-2024-9966)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
http://www.nessus.org/u?32eca5fa
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-9954
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-9955
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-9956
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-9957
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-9958
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-9959
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-9960
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-9961
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-9962
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-9963
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-9964
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-9965
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-9966
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43566
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43577
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43578
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43579
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43580
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43587
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43595
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43596
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49023
Solution
Upgrade to Microsoft Edge version 130.0.2849.46 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
9.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
8.8 (CVSS:3.0/E:P/RL:O/RC:C)
EPSS Score
0.2139
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.8 (CVSS2#E:POC/RL:OF/RC:C)
STIG Severity
I
References
Plugin Information
Published: 2024/10/17, Modified: 2025/01/03
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 130.0.2849.46
210016 - Microsoft Edge (Chromium) < 130.0.2849.68 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 130.0.2849.68. It is, therefore, affected by multiple vulnerabilities as referenced in the October 31, 2024 advisory.

- Out of bounds write in Dawn in Google Chrome prior to 130.0.6723.92 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Critical) (CVE-2024-10487)

- Use after free in WebRTC in Google Chrome prior to 130.0.6723.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2024-10488)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 130.0.2849.68 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.7 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0014
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.4 (CVSS2#E:U/RL:OF/RC:C)
References
Plugin Information
Published: 2024/10/31, Modified: 2025/01/03
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 130.0.2849.68
210592 - Microsoft Edge (Chromium) < 130.0.2849.80 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 130.0.2849.80. It is, therefore, affected by multiple vulnerabilities as referenced in the November 7, 2024 advisory.

- Use after free in Family Experiences in Google Chrome on Android prior to 130.0.6723.116 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity:
High) (CVE-2024-10826)

- Use after free in Serial in Google Chrome prior to 130.0.6723.116 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2024-10827)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 130.0.2849.80 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.7 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0046
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.4 (CVSS2#E:U/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2024-10826
CVE CVE-2024-10827
XREF IAVA:2024-A-0719-S
Plugin Information
Published: 2024/11/08, Modified: 2025/01/06
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 130.0.2849.80
211402 - Microsoft Edge (Chromium) < 131.0.2903.48 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 131.0.2903.48. It is, therefore, affected by multiple vulnerabilities as referenced in the November 14, 2024 advisory.

- Inappropriate implementation in Extensions in Google Chrome prior to 131.0.6778.69 allowed a remote attacker to bypass site isolation via a crafted Chrome Extension. (Chromium security severity: High) (CVE-2024-11110)

- Inappropriate implementation in Autofill in Google Chrome prior to 131.0.6778.69 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page.
(Chromium security severity: Medium) (CVE-2024-11111)

- Use after free in Media in Google Chrome on Windows prior to 131.0.6778.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) (CVE-2024-11112)

- Use after free in Accessibility in Google Chrome prior to 131.0.6778.69 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) (CVE-2024-11113)

- Inappropriate implementation in Views in Google Chrome on Windows prior to 131.0.6778.69 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium) (CVE-2024-11114)

- Insufficient policy enforcement in Navigation in Google Chrome on iOS prior to 131.0.6778.69 allowed a remote attacker to perform privilege escalation via a series of UI gestures. (Chromium security severity:
Medium) (CVE-2024-11115)

- Inappropriate implementation in Blink in Google Chrome prior to 131.0.6778.69 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page.
(Chromium security severity: Medium) (CVE-2024-11116)

- Inappropriate implementation in FileSystem in Google Chrome prior to 131.0.6778.69 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page. (Chromium security severity: Low) (CVE-2024-11117)

- Microsoft Edge (Chromium-based) Information Disclosure Vulnerability (CVE-2024-49025)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 131.0.2903.48 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.9 (CVSS:3.0/E:P/RL:O/RC:C)
EPSS Score
0.0022
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.8 (CVSS2#E:POC/RL:OF/RC:C)
STIG Severity
I
References
Plugin Information
Published: 2024/11/15, Modified: 2025/01/08
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 131.0.2903.48
214350 - Microsoft Edge (Chromium) < 132.0.2957.115 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 132.0.2957.115. It is, therefore, affected by multiple vulnerabilities as referenced in the January 14, 2025 advisory.

- Out of bounds read in Metrics in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2025-0437)

- Type Confusion in V8 in Google Chrome prior to 131.0.6778.264 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High) (CVE-2025-0291)

- Out of bounds memory access in V8 in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2025-0434)

- Inappropriate implementation in Navigation in Google Chrome on Android prior to 132.0.6834.83 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: High) (CVE-2025-0435)

- Integer overflow in Skia in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2025-0436)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 132.0.2957.115 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.9 (CVSS:3.0/E:P/RL:O/RC:C)
EPSS Score
0.0018
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.8 (CVSS2#E:POC/RL:OF/RC:C)
STIG Severity
I
References
Plugin Information
Published: 2025/01/18, Modified: 2025/04/22
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 132.0.2957.115
215070 - Microsoft Edge (Chromium) < 133.0.3065.51 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 133.0.3065.51. It is, therefore, affected by multiple vulnerabilities as referenced in the February 6, 2025 advisory.

- Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability (CVE-2025-21279, CVE-2025-21283, CVE-2025-21342, CVE-2025-21408)

- Use after free in Skia in Google Chrome prior to 133.0.6943.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2025-0444)

- Use after free in V8 in Google Chrome prior to 133.0.6943.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2025-0445)

- Inappropriate implementation in Extensions API in Google Chrome prior to 133.0.6943.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted Chrome Extension. (Chromium security severity: Medium) (CVE-2025-0451)

- Microsoft Edge (Chromium-based) Spoofing Vulnerability (CVE-2025-21267, CVE-2025-21404)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 133.0.3065.51 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.7 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0127
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.4 (CVSS2#E:U/RL:OF/RC:C)
STIG Severity
I
References
Plugin Information
Published: 2025/02/06, Modified: 2025/02/21
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 133.0.3065.51
234582 - Microsoft Edge (Chromium) < 134.0.3124.129 / 135.0.3179.85 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 134.0.3124.129 / 135.0.3179.85. It is, therefore, affected by multiple vulnerabilities as referenced in the April 17, 2025 advisory.

- Use after free in USB in Google Chrome prior to 135.0.7049.95 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2025-3620)

- Heap buffer overflow in Codecs in Google Chrome on Windows prior to 135.0.7049.95 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity:
Critical) (CVE-2025-3619)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 134.0.3124.129 / 135.0.3179.85 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.7 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0014
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.4 (CVSS2#E:U/RL:OF/RC:C)
References
Plugin Information
Published: 2025/04/17, Modified: 2025/04/17
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 135.0.3179.85
233872 - Microsoft Edge (Chromium) < 135.0.3179.54 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 135.0.3179.54. It is, therefore, affected by multiple vulnerabilities as referenced in the April 3, 2025 advisory.

- Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. (CVE-2025-25000)

- Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. (CVE-2025-25001)

- Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network. (CVE-2025-29815)

- Use after free in Site Isolation in Google Chrome prior to 135.0.7049.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2025-3066)

- Inappropriate implementation in Custom Tabs in Google Chrome on Android prior to 135.0.7049.52 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform privilege escalation via a crafted app. (Chromium security severity: Medium) (CVE-2025-3067)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 135.0.3179.54 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.7 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0009
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.4 (CVSS2#E:U/RL:OF/RC:C)
STIG Severity
I
References
Plugin Information
Published: 2025/04/04, Modified: 2025/04/22
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 135.0.3179.54
235616 - Microsoft Edge (Chromium) < 136.0.3240.64 (CVE-2025-4372)
-
Synopsis
The remote host has an web browser installed that is affected by a vulnerability.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 136.0.3240.64. It is, therefore, affected by a vulnerability as referenced in the May 8, 2025 advisory.

- Use after free in WebAudio in Google Chrome prior to 136.0.7103.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) (CVE-2025-4372)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 136.0.3240.64 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.7 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0002
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.4 (CVSS2#E:U/RL:OF/RC:C)
References
Plugin Information
Published: 2025/05/08, Modified: 2025/05/08
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 136.0.3240.64
237505 - Microsoft Edge (Chromium) < 137.0.3296.52 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 137.0.3296.52. It is, therefore, affected by multiple vulnerabilities as referenced in the May 29, 2025 advisory.

- Out of bounds write in V8 in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2025-5280)

- Use after free in Compositing in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2025-5063)

- Inappropriate implementation in Background Fetch API in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium) (CVE-2025-5064)

- Inappropriate implementation in FileSystemAccess API in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) (CVE-2025-5065)

- Inappropriate implementation in Messages in Google Chrome on Android prior to 137.0.7151.55 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) (CVE-2025-5066)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 137.0.3296.52 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.7 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0016
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.4 (CVSS2#E:U/RL:OF/RC:C)
References
Plugin Information
Published: 2025/05/29, Modified: 2025/06/27
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 137.0.3296.52
237731 - Microsoft Edge (Chromium) < 137.0.3296.62 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 137.0.3296.62. It is, therefore, affected by multiple vulnerabilities as referenced in the June 3, 2025 advisory.

- Out of bounds read and write in V8 in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2025-5419)

- Use after free in Blink in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) (CVE-2025-5068)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 137.0.3296.62 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
8.2 (CVSS:3.0/E:F/RL:O/RC:C)
EPSS Score
0.0007
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
8.3 (CVSS2#E:F/RL:OF/RC:C)
References
CVE CVE-2025-5068
CVE CVE-2025-5419
XREF CISA-KNOWN-EXPLOITED:2025/06/26
Plugin Information
Published: 2025/06/03, Modified: 2025/06/09
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 137.0.3296.62
238443 - Microsoft Edge (Chromium) < 137.0.3296.83 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 137.0.3296.83. It is, therefore, affected by multiple vulnerabilities as referenced in the June 13, 2025 advisory.

- Type Confusion in V8 in Google Chrome prior to 137.0.7151.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High) (CVE-2025-5959)

- Use after free in Media in Google Chrome prior to 137.0.7151.103 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2025-5958)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 137.0.3296.83 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.7 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0016
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.4 (CVSS2#E:U/RL:OF/RC:C)
References
Plugin Information
Published: 2025/06/13, Modified: 2025/06/13
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 137.0.3296.83
242849 - Microsoft Edge (Chromium) < 138.0.3351.109 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 138.0.3351.109. It is, therefore, affected by multiple vulnerabilities as referenced in the July 25, 2025 advisory.

- Type Confusion in V8 in Google Chrome prior to 138.0.7204.168 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2025-8010, CVE-2025-8011)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 138.0.3351.109 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.7 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0009
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.4 (CVSS2#E:U/RL:OF/RC:C)
References
Plugin Information
Published: 2025/07/25, Modified: 2025/07/25
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 138.0.3351.109
243240 - Microsoft Edge (Chromium) < 138.0.3351.121 (CVE-2025-8292)
-
Synopsis
The remote host has an web browser installed that is affected by a vulnerability.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 138.0.3351.121. It is, therefore, affected by a vulnerability as referenced in the July 31, 2025 advisory.

- Use after free in Media Stream in Google Chrome prior to 138.0.7204.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2025-8292)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 138.0.3351.121 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.7 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0013
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.4 (CVSS2#E:U/RL:OF/RC:C)
References
Plugin Information
Published: 2025/07/31, Modified: 2025/07/31
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 138.0.3351.121
241151 - Microsoft Edge (Chromium) < 138.0.3351.65 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 138.0.3351.65. It is, therefore, affected by multiple vulnerabilities as referenced in the July 2, 2025 advisory.

- Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. (CVE-2025-49713)

- No cwe for this issue in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network. (CVE-2025-49741)

- Type confusion in V8 in Google Chrome prior to 138.0.7204.96 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High) (CVE-2025-6554)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 138.0.3351.65 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
8.2 (CVSS:3.0/E:F/RL:O/RC:C)
EPSS Score
0.0018
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
8.3 (CVSS2#E:F/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2025-49713
CVE CVE-2025-6554
CVE CVE-2025-49741
XREF CISA-KNOWN-EXPLOITED:2025/07/23
XREF IAVA:2025-A-0461-S
XREF IAVA:2025-A-0466-S
Plugin Information
Published: 2025/07/02, Modified: 2025/10/29
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 138.0.3351.65
242192 - Microsoft Edge (Chromium) < 138.0.3351.95 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 138.0.3351.95. It is, therefore, affected by multiple vulnerabilities as referenced in the July 16, 2025 advisory.

- Use after free in WebRTC in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2025-7657)

- Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High) (CVE-2025-6558)

- Integer overflow in V8 in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2025-7656)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 138.0.3351.95 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
8.2 (CVSS:3.0/E:F/RL:O/RC:C)
EPSS Score
0.0011
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
8.3 (CVSS2#E:F/RL:OF/RC:C)
References
CVE CVE-2025-6558
CVE CVE-2025-7656
CVE CVE-2025-7657
XREF CISA-KNOWN-EXPLOITED:2025/08/12
Plugin Information
Published: 2025/07/16, Modified: 2025/07/22
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 138.0.3351.95
250295 - Microsoft Edge (Chromium) < 139.0.3405.102 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 139.0.3405.102. It is, therefore, affected by multiple vulnerabilities as referenced in the August 15, 2025 advisory.

- Out of bounds write in ANGLE in Google Chrome prior to 139.0.7258.127 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High) (CVE-2025-8901)

- Heap buffer overflow in libaom in Google Chrome prior to 139.0.7258.127 allowed a remote attacker to potentially exploit heap corruption via a curated set of gestures. (Chromium security severity: High) (CVE-2025-8879)

- Race in V8 in Google Chrome prior to 139.0.7258.127 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High) (CVE-2025-8880)

- Inappropriate implementation in File Picker in Google Chrome prior to 139.0.7258.127 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium) (CVE-2025-8881)

- Use after free in Aura in Google Chrome prior to 139.0.7258.127 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page.
(Chromium security severity: Medium) (CVE-2025-8882)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 139.0.3405.102 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.7 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0003
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.4 (CVSS2#E:U/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2025-8879
CVE CVE-2025-8880
CVE CVE-2025-8881
CVE CVE-2025-8882
CVE CVE-2025-8901
XREF IAVA:2025-A-0620-S
Plugin Information
Published: 2025/08/15, Modified: 2025/10/29
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 139.0.3405.102
253522 - Microsoft Edge (Chromium) < 139.0.3405.111 (CVE-2025-9132)
-
Synopsis
The remote host has an web browser installed that is affected by a vulnerability.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 139.0.3405.111. It is, therefore, affected by a vulnerability as referenced in the August 21, 2025 advisory.

- Out of bounds write in V8 in Google Chrome prior to 139.0.7258.138 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2025-9132)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 139.0.3405.111 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.7 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0003
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.4 (CVSS2#E:U/RL:OF/RC:C)
References
Plugin Information
Published: 2025/08/21, Modified: 2025/08/21
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 139.0.3405.111
258091 - Microsoft Edge (Chromium) < 139.0.3405.125 (CVE-2025-9478)
-
Synopsis
The remote host has an web browser installed that is affected by a vulnerability.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 139.0.3405.125. It is, therefore, affected by a vulnerability as referenced in the August 28, 2025 advisory.

- Use after free in ANGLE in Google Chrome prior to 139.0.7258.154 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical) (CVE-2025-9478)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 139.0.3405.125 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.7 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0003
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.4 (CVSS2#E:U/RL:OF/RC:C)
References
Plugin Information
Published: 2025/08/28, Modified: 2025/08/28
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 139.0.3405.125
245584 - Microsoft Edge (Chromium) < 139.0.3405.86 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 139.0.3405.86. It is, therefore, affected by multiple vulnerabilities as referenced in the August 7, 2025 advisory.

- Use after free in Cast in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) (CVE-2025-8578)

- Use after free in Extensions in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security severity: Medium) (CVE-2025-8576)

- Inappropriate implementation in Picture In Picture in Google Chrome prior to 139.0.7258.66 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) (CVE-2025-8577)

- Inappropriate implementation in Picture In Picture in Google Chrome prior to 139.0.7258.66 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low) (CVE-2025-8579)

- Inappropriate implementation in Filesystems in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low) (CVE-2025-8580)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 139.0.3405.86 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.7 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0005
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.4 (CVSS2#E:U/RL:OF/RC:C)
STIG Severity
I
References
Plugin Information
Published: 2025/08/08, Modified: 2025/10/29
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 139.0.3405.86
264572 - Microsoft Edge (Chromium) < 140.0.3485.66 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 140.0.3485.66. It is, therefore, affected by multiple vulnerabilities as referenced in the September 11, 2025 advisory.

- Inappropriate implementation in Mojo in Google Chrome on Android, Linux, ChromeOS prior to 140.0.7339.127 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromium security severity:
High) (CVE-2025-10201)

- Use after free in Serviceworker in Google Chrome on Desktop prior to 140.0.7339.127 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity:
Critical) (CVE-2025-10200)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 140.0.3485.66 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.7 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0007
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.4 (CVSS2#E:U/RL:OF/RC:C)
References
Plugin Information
Published: 2025/09/11, Modified: 2025/09/11
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 140.0.3485.66
265935 - Microsoft Edge (Chromium) < 140.0.3485.94 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 140.0.3485.94. It is, therefore, affected by multiple vulnerabilities as referenced in the September 25, 2025 advisory.

- Integer overflow in V8 in Google Chrome prior to 140.0.7339.207 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2025-10892)

- Side-channel information leakage in V8 in Google Chrome prior to 140.0.7339.207 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High) (CVE-2025-10890)

- Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability (CVE-2025-59251)

- Integer overflow in V8. (CVE-2025-10891)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 140.0.3485.94 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.7 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0008
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.4 (CVSS2#E:U/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2025-10890
CVE CVE-2025-10891
CVE CVE-2025-10892
CVE CVE-2025-59251
XREF IAVA:2025-A-0703-S
Plugin Information
Published: 2025/09/25, Modified: 2025/10/29
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 140.0.3485.94
275375 - Microsoft Edge (Chromium) < 142.0.3595.80 (CVE-2025-13042)
-
Synopsis
The remote host has an web browser installed that is affected by a vulnerability.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 142.0.3595.80. It is, therefore, affected by a vulnerability as referenced in the November 13, 2025 advisory.

- Inappropriate implementation in V8 in Google Chrome prior to 142.0.7444.166 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2025-13042)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 142.0.3595.80 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.7 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0007
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.4 (CVSS2#E:U/RL:OF/RC:C)
References
Plugin Information
Published: 2025/11/13, Modified: 2025/11/13
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 142.0.3595.80
275726 - Microsoft Edge (Chromium) < 142.0.3595.90 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 142.0.3595.90. It is, therefore, affected by multiple vulnerabilities as referenced in the November 18, 2025 advisory.

- Type Confusion in V8 in Google Chrome prior to 142.0.7444.175 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2025-13223, CVE-2025-13224)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 142.0.3595.90 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
8.2 (CVSS:3.0/E:F/RL:O/RC:C)
EPSS Score
0.155
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
8.3 (CVSS2#E:F/RL:OF/RC:C)
References
CVE CVE-2025-13223
CVE CVE-2025-13224
XREF CISA-KNOWN-EXPLOITED:2025/12/10
Plugin Information
Published: 2025/11/18, Modified: 2025/11/19
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 142.0.3595.90
282534 - Microsoft Edge (Chromium) < 143.0.3650.139 (CVE-2026-0628)
-
Synopsis
The remote host has an web browser installed that is affected by a vulnerability.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 143.0.3650.139. It is, therefore, affected by a vulnerability as referenced in the January 9, 2026 advisory.

- Insufficient policy enforcement in WebView tag in Google Chrome prior to 143.0.7499.192 allowed an attacker who convinced a user to install a malicious extension to inject scripts or HTML into a privileged page via a crafted Chrome Extension. (Chromium security severity: High) (CVE-2026-0628)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 143.0.3650.139 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.9 (CVSS:3.0/E:P/RL:O/RC:C)
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.8 (CVSS2#E:POC/RL:OF/RC:C)
References
Plugin Information
Published: 2026/01/09, Modified: 2026/01/09
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 143.0.3650.139
279262 - Microsoft Edge (Chromium) < 143.0.3650.96 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 143.0.3650.96. It is, therefore, affected by multiple vulnerabilities as referenced in the December 18, 2025 advisory.

- Out of bounds read and write in V8 in Google Chrome prior to 143.0.7499.147 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2025-14766)

- Use after free in WebGPU in Google Chrome prior to 143.0.7499.147 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2025-14765)

- Microsoft Edge (Chromium-based) Spoofing Vulnerability (CVE-2025-65046)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 143.0.3650.96 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.7 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0005
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.4 (CVSS2#E:U/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2025-14765
CVE CVE-2025-14766
CVE CVE-2025-65046
XREF IAVA:2026-A-0017
Plugin Information
Published: 2025/12/18, Modified: 2026/01/09
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 143.0.3650.96
159037 - Microsoft Edge (Chromium) < 99.0.1150.46 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 99.0.1150.46. It is, therefore, affected by multiple vulnerabilities as referenced in the March 17, 2022 advisory.

- Use after free in New Tab Page in Google Chrome prior to 99.0.4844.74 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via specific user interactions. (CVE-2022-0980)

- Use after free in Blink Layout in Google Chrome on Android prior to 99.0.4844.74 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.
(CVE-2022-0971)

- Use after free in Extensions in Google Chrome prior to 99.0.4844.74 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.
(CVE-2022-0972)

- Use after free in Safe Browsing in Google Chrome prior to 99.0.4844.74 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (CVE-2022-0973)

- Use after free in Splitscreen in Google Chrome on Chrome OS prior to 99.0.4844.74 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page. (CVE-2022-0974)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 99.0.1150.46 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
9.6 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
8.6 (CVSS:3.0/E:P/RL:O/RC:C)
EPSS Score
0.0168
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.8 (CVSS2#E:POC/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2022-0971
CVE CVE-2022-0972
CVE CVE-2022-0973
CVE CVE-2022-0974
CVE CVE-2022-0975
CVE CVE-2022-0976
CVE CVE-2022-0977
CVE CVE-2022-0978
CVE CVE-2022-0979
CVE CVE-2022-0980
CVE CVE-2022-26899
XREF IAVA:2022-A-0120-S
XREF IAVA:2021-A-0544-S
Plugin Information
Published: 2022/03/17, Modified: 2023/11/06
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 99.0.1150.46
159239 - Microsoft Edge (Chromium) < 99.0.1150.55 Vulnerability
-
Synopsis
The remote host has an web browser installed that is affected by a vulnerability
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 99.0.1150.55. It is, therefore, affected by a vulnerability as referenced in the March 26, 2022 advisory.

- Type confusion in V8 in Google Chrome prior to 99.0.4844.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (CVE-2022-1096)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 99.0.1150.55 or later.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
8.2 (CVSS:3.0/E:F/RL:O/RC:C)
EPSS Score
0.4016
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
8.3 (CVSS2#E:F/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2022-1096
XREF CISA-KNOWN-EXPLOITED:2022/04/18
XREF IAVA:2022-A-0126-S
XREF IAVA:2021-A-0544-S
Plugin Information
Published: 2022/03/26, Modified: 2023/11/03
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 99.0.1150.55
52544 - Microsoft Forefront Endpoint Protection / System Center Endpoint Protection / Anti-malware Client Detection and Status
-
Synopsis
An antivirus or antimalware application is installed on the remote host, but it is not working properly.
Description
Microsoft Forefront Endpoint Protection, or another antimalware product from Microsoft, is installed on the remote host. However, there is a problem with the installation; either its services are not running or its engine and/or virus definitions are out of date.
See Also
Solution
Make sure that updates are working and the associated services are running.
Risk Factor
Critical
CVSS v3.0 Base Score
10.0 (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
Plugin Information
Published: 2011/03/04, Modified: 2025/03/25
Plugin Output

tcp/445/cifs



A Microsoft anti-malware product is installed on the remote host :

Product name : Windows Defender
Path : C:\Program Files\Windows Defender\
Version : 4.18.1909.6
Engine version : 1.1.16400.2
Antivirus signature version : 1.303.25.0
Antispyware signature version : 1.303.25.0

The antivirus signatures are out of date. The last known updated
version from the vendor is : 1.305.1053.0
The antispyware signatures are out of date. The last known updated
version from the vendor is : 1.305.1053.0

As a result, the remote host might be infected by viruses received by
email or other means.
22024 - Microsoft Internet Explorer Unsupported Version Detection
-
Synopsis
The remote host contains an unsupported version of Internet Explorer.
Description
According to its self-reported version number, the installation of Microsoft Internet Explorer on the remote Windows host is no longer supported.

Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security vulnerabilities.
See Also
Solution
Either Upgrade to a version of Internet Explorer that is currently supported or disable Internet Explorer on the target device.
Risk Factor
Critical
CVSS v3.0 Base Score
10.0 (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
References
XREF IAVA:0001-A-0557
Plugin Information
Published: 2006/07/11, Modified: 2025/07/24
Plugin Output

tcp/445/cifs


The remote host has Internet Explorer version 11.789.19041.0 installed, which is no longer supported.
Internet Explorer was found on the host and may still be available for use as a
standalone browser. To prevent the use of Internet Explorer, Microsoft has included a
Browser Helper Object (BHO) to handle redirects from Internet Explorer to Edge.
The InternetExplorerIntegrationReloadInIEModeAllowed (Mandatory) and (Recommended) policies are not configured
which means users can render content in IE Mode.
187901 - Security Updates for Microsoft .NET Framework (January 2024)
-
Synopsis
The Microsoft .NET Framework installation on the remote host is missing a security update.
Description
The Microsoft .NET Framework installation on the remote host is missing a security update. It is, therefore, affected by multiple vulnerabilities, as follows:

- Denial of service vulnerability in Microsoft .NET Framework. (CVE-2023-36042, CVE-2024-21312)

- Security feature bypass in System.Data.SqlClient SQL data provider. An attacker can perform a man-in-the-middle attack on the connection between the client and server in order to read and modify the TLS traffic. (CVE-2024-0056)

- Security feature bypass in applications that use the X.509 chain building APIs. When processing an untrusted certificate with malformed signatures, the framework returns an incorrect reason code.
Applications which make use of this reason code may treat this scenario as a successful chain build, potentially bypassing the application's typical authentication logic. (CVE-2024-0057)
See Also
Solution
Microsoft has released security updates for Microsoft .NET Framework.
Risk Factor
Critical
CVSS v3.0 Base Score
9.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
8.5 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0864
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.4 (CVSS2#E:U/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2023-36042
CVE CVE-2024-0056
CVE CVE-2024-0057
CVE CVE-2024-21312
MSKB 5033898
MSKB 5033899
MSKB 5033904
MSKB 5033907
MSKB 5033909
MSKB 5033910
MSKB 5033911
MSKB 5033912
MSKB 5033914
MSKB 5033916
MSKB 5033917
MSKB 5033918
MSKB 5033919
MSKB 5033920
MSKB 5033922
MSKB 5033945
MSKB 5033946
MSKB 5033947
MSKB 5033948
XREF MSFT:MS24-5033898
XREF MSFT:MS24-5033899
XREF MSFT:MS24-5033904
XREF MSFT:MS24-5033907
XREF MSFT:MS24-5033909
XREF MSFT:MS24-5033910
XREF MSFT:MS24-5033911
XREF MSFT:MS24-5033912
XREF MSFT:MS24-5033914
XREF MSFT:MS24-5033916
XREF MSFT:MS24-5033917
XREF MSFT:MS24-5033918
XREF MSFT:MS24-5033919
XREF MSFT:MS24-5033920
XREF MSFT:MS24-5033922
XREF MSFT:MS24-5033945
XREF MSFT:MS24-5033946
XREF MSFT:MS24-5033947
XREF MSFT:MS24-5033948
XREF IAVA:2024-A-0011-S
Plugin Information
Published: 2024/01/10, Modified: 2024/03/29
Plugin Output

tcp/445/cifs


Microsoft .NET Framework 4.8
The remote host is missing one of the following rollup KBs :

Cumulative
- 5033909

C:\Windows\Microsoft.NET\Framework\v4.0.30319\system.web.dll has not been patched.
Remote version : 4.8.4494.0
Should be : 4.8.4690.0

214274 - Security Updates for Microsoft .NET Framework (January 2025)
-
Synopsis
The Microsoft .NET Framework installation on the remote host is missing a security update.
Description
The Microsoft .NET Framework installation on the remote host is missing a security update. It is, therefore, affected by multiple denial of service vulnerabilities, as follows:

- A remote code execution vulnerability. An attacker can exploit this issue to cause the affected component to execute unauthorized code. (CVE-2025-21176)

Note that Nessus has relied upon on the application's self-reported version number.
See Also
Solution
Microsoft has released security updates for Microsoft .NET Framework.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.7 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0035
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.4 (CVSS2#E:U/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2025-21176
MSKB 5049614
MSKB 5049618
MSKB 5049620
MSKB 5049622
MSKB 5049624
MSKB 5049993
MSKB 5050013
MSKB 5050180
MSKB 5050181
MSKB 5050182
MSKB 5050183
MSKB 5050184
MSKB 5050185
MSKB 5050186
MSKB 5050187
MSKB 5050188
MSKB 5050416
XREF MSFT:MS25-5049614
XREF MSFT:MS25-5049618
XREF MSFT:MS25-5049620
XREF MSFT:MS25-5049622
XREF MSFT:MS25-5049624
XREF MSFT:MS25-5049993
XREF MSFT:MS25-5050013
XREF MSFT:MS25-5050180
XREF MSFT:MS25-5050181
XREF MSFT:MS25-5050182
XREF MSFT:MS25-5050183
XREF MSFT:MS25-5050184
XREF MSFT:MS25-5050185
XREF MSFT:MS25-5050186
XREF MSFT:MS25-5050187
XREF MSFT:MS25-5050188
XREF MSFT:MS25-5050416
XREF IAVA:2025-A-0028-S
XREF CWE:126
Plugin Information
Published: 2025/01/16, Modified: 2025/04/09
Plugin Output

tcp/445/cifs


Microsoft .NET Framework 4.8
The remote host is missing one of the following rollup KBs :

Cumulative
- 5049613

C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorlib.dll has not been patched.
Remote version : 4.8.4515.0
Should be : 4.8.4772.0

177393 - Security Updates for Microsoft .NET Framework (June 2023)
-
Synopsis
The Microsoft .NET Framework installation on the remote host is missing a security update.
Description
The Microsoft .NET Framework installation on the remote host is missing a security update. It is, therefore, affected by multiple vulnerabilities, as follows:

- A remote code execution vulnerability in the MSDIA SDK where corrupted PDBs can cause a heap overflow.
(CVE-2023-24897)

- A remote code execution vulnerability in WPF where the BAML offers other ways to instantiate types.
(CVE-2023-21808)

- A remote code execution vulnerability in the WPF XAML parser (CVE-2023-24895)
See Also
http://www.nessus.org/u?283f4db9
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24895
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24897
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24936
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29326
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29331
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32030
https://support.microsoft.com/en-us/help/5027107
https://support.microsoft.com/en-us/help/5027108
https://support.microsoft.com/en-us/help/5027109
https://support.microsoft.com/en-us/help/5027110
https://support.microsoft.com/en-us/help/5027111
https://support.microsoft.com/en-us/help/5027112
https://support.microsoft.com/en-us/help/5027113
https://support.microsoft.com/en-us/help/5027114
https://support.microsoft.com/en-us/help/5027115
https://support.microsoft.com/en-us/help/5027116
https://support.microsoft.com/en-us/help/5027117
https://support.microsoft.com/en-us/help/5027118
https://support.microsoft.com/en-us/help/5027119
https://support.microsoft.com/en-us/help/5027121
https://support.microsoft.com/en-us/help/5027122
https://support.microsoft.com/en-us/help/5027123
https://support.microsoft.com/en-us/help/5027124
https://support.microsoft.com/en-us/help/5027125
https://support.microsoft.com/en-us/help/5027126
https://support.microsoft.com/en-us/help/5027127
https://support.microsoft.com/en-us/help/5027128
https://support.microsoft.com/en-us/help/5027129
https://support.microsoft.com/en-us/help/5027131
https://support.microsoft.com/en-us/help/5027132
https://support.microsoft.com/en-us/help/5027133
https://support.microsoft.com/en-us/help/5027134
https://support.microsoft.com/en-us/help/5027138
https://support.microsoft.com/en-us/help/5027139
https://support.microsoft.com/en-us/help/5027140
https://support.microsoft.com/en-us/help/5027141
Solution
Microsoft has released security updates for Microsoft .NET Framework.
Risk Factor
Critical
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.7 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.1026
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.4 (CVSS2#E:U/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2023-24895
CVE CVE-2023-24897
CVE CVE-2023-24936
CVE CVE-2023-29326
CVE CVE-2023-29330
CVE CVE-2023-29331
CVE CVE-2023-32030
MSKB 5027107
MSKB 5027108
MSKB 5027109
MSKB 5027110
MSKB 5027111
MSKB 5027112
MSKB 5027113
MSKB 5027114
MSKB 5027115
MSKB 5027116
MSKB 5027117
MSKB 5027118
MSKB 5027119
MSKB 5027121
MSKB 5027122
MSKB 5027123
MSKB 5027124
MSKB 5027125
MSKB 5027126
MSKB 5027127
MSKB 5027128
MSKB 5027129
MSKB 5027131
MSKB 5027132
MSKB 5027133
MSKB 5027134
MSKB 5027138
MSKB 5027139
MSKB 5027140
MSKB 5027141
XREF MSFT:MS23-5027107
XREF MSFT:MS23-5027108
XREF MSFT:MS23-5027109
XREF MSFT:MS23-5027110
XREF MSFT:MS23-5027111
XREF MSFT:MS23-5027112
XREF MSFT:MS23-5027113
XREF MSFT:MS23-5027114
XREF MSFT:MS23-5027115
XREF MSFT:MS23-5027116
XREF MSFT:MS23-5027117
XREF MSFT:MS23-5027118
XREF MSFT:MS23-5027119
XREF MSFT:MS23-5027121
XREF MSFT:MS23-5027122
XREF MSFT:MS23-5027123
XREF MSFT:MS23-5027124
XREF MSFT:MS23-5027125
XREF MSFT:MS23-5027126
XREF MSFT:MS23-5027127
XREF MSFT:MS23-5027128
XREF MSFT:MS23-5027129
XREF MSFT:MS23-5027131
XREF MSFT:MS23-5027132
XREF MSFT:MS23-5027133
XREF MSFT:MS23-5027134
XREF MSFT:MS23-5027138
XREF MSFT:MS23-5027139
XREF MSFT:MS23-5027140
XREF MSFT:MS23-5027141
XREF IAVA:2023-A-0291-S
Plugin Information
Published: 2023/06/16, Modified: 2023/08/11
Plugin Output

tcp/445/cifs


Microsoft .NET Framework 4.8
The remote host is missing one of the following rollup KBs :

Cumulative
- 5027122

C:\Windows\Microsoft.NET\Framework\v4.0.30319\system.core.dll has not been patched.
Remote version : 4.8.4536.0
Should be : 4.8.4644.0

185887 - Security Updates for Microsoft .NET Framework (November 2023)
-
Synopsis
The Microsoft .NET Framework installation on the remote host is missing a security update.
Description
The Microsoft .NET Framework installation on the remote host is missing a security update. It is, therefore, affected by multiple vulnerabilities, as follows:

- Security feature bypass in ASP.NET. An attacker can bypass the security checks that prevents an attacker from accessing internal applications in a website. (CVE-2023-36560)

- Privilege escalation vulnerability in FTP component of .NET Framework. An attacker can inject arbitrary commands to the FTP server. (CVE-2023-36049)

- Information disclosure vulnerability in .NET Framework. An attacker can obtain the ObjRef URI which could lead to remote code execution. (CVE-2024-29059
See Also
Solution
Microsoft has released security updates for Microsoft .NET Framework.
Risk Factor
Critical
CVSS v3.0 Base Score
9.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
9.1 (CVSS:3.0/E:F/RL:O/RC:C)
EPSS Score
0.9385
CVSS v2.0 Base Score
10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
8.3 (CVSS2#E:F/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2023-36049
CVE CVE-2023-36560
CVE CVE-2024-29059
MSKB 5031984
MSKB 5031987
MSKB 5031988
MSKB 5031989
MSKB 5031990
MSKB 5031991
MSKB 5031993
MSKB 5031995
MSKB 5031999
MSKB 5032000
MSKB 5032004
MSKB 5032005
MSKB 5032006
MSKB 5032007
MSKB 5032008
MSKB 5032009
MSKB 5032010
MSKB 5032011
MSKB 5032012
XREF MSFT:MS23-5031984
XREF MSFT:MS23-5031987
XREF MSFT:MS23-5031988
XREF MSFT:MS23-5031989
XREF MSFT:MS23-5031990
XREF MSFT:MS23-5031991
XREF MSFT:MS23-5031993
XREF MSFT:MS23-5031995
XREF MSFT:MS23-5031999
XREF MSFT:MS23-5032000
XREF MSFT:MS23-5032004
XREF MSFT:MS23-5032005
XREF MSFT:MS23-5032006
XREF MSFT:MS23-5032007
XREF MSFT:MS23-5032008
XREF MSFT:MS23-5032009
XREF MSFT:MS23-5032010
XREF MSFT:MS23-5032011
XREF MSFT:MS23-5032012
XREF IAVA:2023-A-0618-S
XREF IAVA:2024-A-0178-S
XREF CISA-KNOWN-EXPLOITED:2025/02/25
Plugin Information
Published: 2023/11/16, Modified: 2025/02/04
Plugin Output

tcp/445/cifs


Microsoft .NET Framework 4.8
The remote host is missing one of the following rollup KBs :

Cumulative
- 5031988

C:\Windows\Microsoft.NET\Framework\v4.0.30319\system.web.dll has not been patched.
Remote version : 4.8.4494.0
Should be : 4.8.4682.0

168679 - KB5021233: Windows 10 Version 20H2 / 21H1 / 21H2 / 22H2 Security Update (December 2022)
-
Synopsis
The remote Windows host is affected by multiple vulnerabilities.
Description
The remote Windows host is missing security update 5021233. It is, therefore, affected by multiple vulnerabilities

- PowerShell Remote Code Execution Vulnerability (CVE-2022-41076)

- Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability (CVE-2022-44689)

- A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. (CVE-2022-44676)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Apply Security Update 5021233
Risk Factor
High
CVSS v3.0 Base Score
8.5 (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
8.1 (CVSS:3.0/E:H/RL:O/RC:C)
EPSS Score
0.6798
CVSS v2.0 Base Score
7.6 (CVSS2#AV:N/AC:H/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
6.6 (CVSS2#E:H/RL:OF/RC:C)
STIG Severity
I
References
Plugin Information
Published: 2022/12/13, Modified: 2024/06/17
Plugin Output

tcp/445/cifs


The remote host is missing one of the following rollup KBs :
- 5021233

- C:\Windows\system32\ntoskrnl.exe has not been patched.
Remote version : 10.0.19041.2006
Should be : 10.0.19041.2364
181307 - KB5030211: Windows 10 Version 21H2 / Windows 10 Version 22H2 Security Update (September 2023)
-
Synopsis
The remote Windows host is affected by multiple vulnerabilities.
Description
The remote Windows host is missing security update 5030211. It is, therefore, affected by multiple vulnerabilities

- Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability (CVE-2023-35355)

- Windows GDI Elevation of Privilege Vulnerability (CVE-2023-36804, CVE-2023-38161)

- Windows TCP/IP Denial of Service Vulnerability (CVE-2023-38149)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Apply Security Update 5030211
Risk Factor
High
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
8.4 (CVSS:3.0/E:H/RL:O/RC:C)
EPSS Score
0.7891
CVSS v2.0 Base Score
8.3 (CVSS2#AV:A/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.2 (CVSS2#E:H/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2023-35355
CVE CVE-2023-36802
CVE CVE-2023-36803
CVE CVE-2023-36804
CVE CVE-2023-36805
CVE CVE-2023-38139
CVE CVE-2023-38140
CVE CVE-2023-38141
CVE CVE-2023-38142
CVE CVE-2023-38143
CVE CVE-2023-38144
CVE CVE-2023-38147
CVE CVE-2023-38148
CVE CVE-2023-38149
CVE CVE-2023-38160
CVE CVE-2023-38161
MSKB 5030211
XREF MSFT:MS23-5030211
XREF CISA-KNOWN-EXPLOITED:2023/10/03
XREF IAVA:2023-A-0472-S
XREF IAVA:2023-A-0471-S
Exploitable With
Core Impact (true)
Plugin Information
Published: 2023/09/12, Modified: 2024/10/23
Plugin Output

tcp/445/cifs


The remote host is missing one of the following rollup KBs :
- 5030211

- C:\Windows\system32\ntoskrnl.exe has not been patched.
Remote version : 10.0.19041.2006
Should be : 10.0.19041.3448
270379 - KB5066791: Windows 10 version 21H2 / Windows 10 Version 22H2 Security Update (October 2025)
-
Synopsis
The remote Windows host is affected by multiple vulnerabilities.
Description
The remote Windows host is missing security update 5066791. It is, therefore, affected by multiple vulnerabilities

- tif_predict.h and tif_predict.c in libtiff 4.0.6 have assertions that can lead to assertion failures in debug mode, or buffer overflows in release mode, when dealing with unusual tile size like YCbCr with subsampling. Reported as MSVR 35105, aka Predictor heap-buffer-overflow. (CVE-2016-9535)

- In IGEL OS before 11, Secure Boot can be bypassed because the igel-flash-driver module improperly verifies a cryptographic signature. Ultimately, a crafted root filesystem can be mounted from an unverified SquashFS image. (CVE-2025-47827)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Apply Security Update 5066791
Risk Factor
High
CVSS v3.0 Base Score
9.9 (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
9.2 (CVSS:3.0/E:F/RL:O/RC:C)
EPSS Score
0.0824
CVSS v2.0 Base Score
7.5 (CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P)
CVSS v2.0 Temporal Score
6.2 (CVSS2#E:F/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2016-9535
CVE CVE-2025-24052
CVE CVE-2025-24990
CVE CVE-2025-25004
CVE CVE-2025-47827
CVE CVE-2025-48813
CVE CVE-2025-49708
CVE CVE-2025-50152
CVE CVE-2025-50175
CVE CVE-2025-53139
CVE CVE-2025-53150
CVE CVE-2025-53768
CVE CVE-2025-54957
CVE CVE-2025-55325
CVE CVE-2025-55326
CVE CVE-2025-55328
CVE CVE-2025-55331
CVE CVE-2025-55332
CVE CVE-2025-55333
CVE CVE-2025-55335
CVE CVE-2025-55336
CVE CVE-2025-55338
CVE CVE-2025-55340
CVE CVE-2025-55678
CVE CVE-2025-55679
CVE CVE-2025-55680
CVE CVE-2025-55681
CVE CVE-2025-55685
CVE CVE-2025-55686
CVE CVE-2025-55687
CVE CVE-2025-55689
CVE CVE-2025-55692
CVE CVE-2025-55695
CVE CVE-2025-55696
CVE CVE-2025-55699
CVE CVE-2025-55700
CVE CVE-2025-55701
CVE CVE-2025-58714
CVE CVE-2025-58715
CVE CVE-2025-58716
CVE CVE-2025-58717
CVE CVE-2025-58718
CVE CVE-2025-58719
CVE CVE-2025-58720
CVE CVE-2025-58722
CVE CVE-2025-58725
CVE CVE-2025-58726
CVE CVE-2025-58727
CVE CVE-2025-58728
CVE CVE-2025-58729
CVE CVE-2025-58730
CVE CVE-2025-58732
CVE CVE-2025-58733
CVE CVE-2025-58734
CVE CVE-2025-58735
CVE CVE-2025-58736
CVE CVE-2025-58738
CVE CVE-2025-58739
CVE CVE-2025-59185
CVE CVE-2025-59187
CVE CVE-2025-59190
CVE CVE-2025-59191
CVE CVE-2025-59192
CVE CVE-2025-59193
CVE CVE-2025-59195
CVE CVE-2025-59196
CVE CVE-2025-59197
CVE CVE-2025-59198
CVE CVE-2025-59199
CVE CVE-2025-59200
CVE CVE-2025-59201
CVE CVE-2025-59202
CVE CVE-2025-59203
CVE CVE-2025-59204
CVE CVE-2025-59205
CVE CVE-2025-59207
CVE CVE-2025-59208
CVE CVE-2025-59209
CVE CVE-2025-59211
CVE CVE-2025-59214
CVE CVE-2025-59230
CVE CVE-2025-59242
CVE CVE-2025-59244
CVE CVE-2025-59253
CVE CVE-2025-59254
CVE CVE-2025-59255
CVE CVE-2025-59259
CVE CVE-2025-59275
CVE CVE-2025-59277
CVE CVE-2025-59278
CVE CVE-2025-59280
CVE CVE-2025-59282
CVE CVE-2025-59294
CVE CVE-2025-59295
MSKB 5066791
XREF MSFT:MS25-5066791
XREF CISA-KNOWN-EXPLOITED:2025/11/04
XREF IAVA:2025-A-0775-S
XREF IAVA:2025-A-0776-S
Plugin Information
Published: 2025/10/14, Modified: 2025/11/18
Plugin Output

tcp/445/cifs


The remote host is missing one of the following rollup KBs :
- 5066791

- C:\Windows\system32\ntoskrnl.exe has not been patched.
Remote version : 10.0.19041.2006
Should be : 10.0.19041.6456
164253 - Microsoft Edge (Chromium) < 104.0.1293.60 Vulnerability
-
Synopsis
The remote host has an web browser installed that is affected by a vulnerability
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 104.0.1293.60. It is, therefore, affected by a vulnerability as referenced in the August 17, 2022 advisory.

- Insufficient validation of untrusted input in Intents. (CVE-2022-2856)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 104.0.1293.60 or later.
Risk Factor
High
CVSS v3.0 Base Score
6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N)
CVSS v3.0 Temporal Score
6.2 (CVSS:3.0/E:H/RL:O/RC:C)
EPSS Score
0.0179
CVSS v2.0 Base Score
7.8 (CVSS2#AV:N/AC:L/Au:N/C:N/I:C/A:N)
CVSS v2.0 Temporal Score
6.8 (CVSS2#E:H/RL:OF/RC:C)
References
CVE CVE-2022-2856
XREF CISA-KNOWN-EXPLOITED:2022/09/08
Plugin Information
Published: 2022/08/18, Modified: 2023/10/13
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 104.0.1293.60
170783 - Microsoft Edge (Chromium) < 109.0.1518.52 Elevation of Privilege (CVE-2023-21795)
-
Synopsis
The remote host has an web browser installed that is affected by elevation of privilege.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 109.0.1518.52. It is, therefore, affected by a vulnerability as referenced in the January 13, 2023 advisory.

- Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2023-21796. (CVE-2023-21795)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 109.0.1518.52 or later.
Risk Factor
High
CVSS v3.0 Base Score
8.3 (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.2 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0016
CVSS v2.0 Base Score
7.6 (CVSS2#AV:N/AC:H/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
5.6 (CVSS2#E:U/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2023-21795
XREF IAVA:2023-A-0034-S
Plugin Information
Published: 2023/01/30, Modified: 2023/02/10
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 109.0.1518.52
170690 - Microsoft Edge (Chromium) < 109.0.1518.61 Security Feature Bypass (CVE-2023-21719)
-
Synopsis
The remote host has an web browser installed that is affected by security feature bypass.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 109.0.1518.61. It is, therefore, affected by a vulnerability as referenced in the January 19, 2023 advisory.

- Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability. (CVE-2023-21719)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 109.0.1518.61 or later.
Risk Factor
High
CVSS v3.0 Base Score
6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)
CVSS v3.0 Temporal Score
5.7 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0198
CVSS v2.0 Base Score
7.8 (CVSS2#AV:N/AC:L/Au:N/C:C/I:N/A:N)
CVSS v2.0 Temporal Score
5.8 (CVSS2#E:U/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2023-21719
XREF IAVA:2023-A-0051-S
Plugin Information
Published: 2023/01/27, Modified: 2023/02/10
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 109.0.1518.61
175396 - Microsoft Edge (Chromium) < 113.0.1774.35 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 113.0.1774.35. It is, therefore, affected by multiple vulnerabilities as referenced in the May 5, 2023 advisory.

- Inappropriate implementation in Prompts in Google Chrome prior to 113.0.5672.63 allowed a remote attacker to bypass permission restrictions via a crafted HTML page. (Chromium security severity: Medium) (CVE-2023-2459)

- Insufficient validation of untrusted input in Extensions in Google Chrome prior to 113.0.5672.63 allowed an attacker who convinced a user to install a malicious extension to bypass file access checks via a crafted HTML page. (Chromium security severity: Medium) (CVE-2023-2460)

- Inappropriate implementation in Prompts in Google Chrome prior to 113.0.5672.63 allowed a remote attacker to obfuscate main origin data via a crafted HTML page. (Chromium security severity: Medium) (CVE-2023-2462)

- Inappropriate implementation in Full Screen Mode in Google Chrome on Android prior to 113.0.5672.63 allowed a remote attacker to hide the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Medium) (CVE-2023-2463)

- Inappropriate implementation in PictureInPicture in Google Chrome prior to 113.0.5672.63 allowed an attacker who convinced a user to install a malicious extension to perform an origin spoof in the security UI via a crafted HTML page. (Chromium security severity: Medium) (CVE-2023-2464)

- Inappropriate implementation in CORS in Google Chrome prior to 113.0.5672.63 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium) (CVE-2023-2465)

- Inappropriate implementation in Prompts in Google Chrome prior to 113.0.5672.63 allowed a remote attacker to spoof the contents of the security UI via a crafted HTML page. (Chromium security severity: Low) (CVE-2023-2466)

- Inappropriate implementation in Prompts in Google Chrome on Android prior to 113.0.5672.63 allowed a remote attacker to bypass permissions restrictions via a crafted HTML page. (Chromium security severity:
Low) (CVE-2023-2467)

- Inappropriate implementation in PictureInPicture in Google Chrome prior to 113.0.5672.63 allowed a remote attacker who had compromised the renderer process to obfuscate the security UI via a crafted HTML page.
(Chromium security severity: Low) (CVE-2023-2468)

- Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability (CVE-2023-29350)

- Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability (CVE-2023-29354)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 113.0.1774.35 or later.
Risk Factor
High
CVSS v3.0 Base Score
7.1 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N)
CVSS v3.0 Temporal Score
6.2 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0087
CVSS v2.0 Base Score
8.5 (CVSS2#AV:N/AC:L/Au:N/C:C/I:P/A:N)
CVSS v2.0 Temporal Score
6.3 (CVSS2#E:U/RL:OF/RC:C)
STIG Severity
I
References
Plugin Information
Published: 2023/05/11, Modified: 2025/01/01
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 113.0.1774.35
178285 - Microsoft Edge (Chromium) < 114.0.1823.82 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 114.0.1823.82. It is, therefore, affected by multiple vulnerabilities as referenced in the July 13, 2023 advisory.

- Microsoft Edge for Android (Chromium-based) Tampering Vulnerability (CVE-2023-36888)

- Microsoft Edge for iOS Spoofing Vulnerability (CVE-2023-36883)

- Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability (CVE-2023-36887)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 114.0.1823.82 or later.
Risk Factor
High
CVSS v3.0 Base Score
7.8 (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.0 (CVSS:3.0/E:P/RL:O/RC:C)
EPSS Score
0.0729
CVSS v2.0 Base Score
7.5 (CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P)
CVSS v2.0 Temporal Score
5.9 (CVSS2#E:POC/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2023-36883
CVE CVE-2023-36887
CVE CVE-2023-36888
XREF IAVA:2023-A-0358-S
Plugin Information
Published: 2023/07/14, Modified: 2025/03/04
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 114.0.1823.82
189188 - Microsoft Edge (Chromium) < 120.0.2210.133 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 120.0.2210.133. It is, therefore, affected by multiple vulnerabilities as referenced in the January 11, 2024 advisory.

- Insufficient data validation in Extensions in Google Chrome prior to 120.0.6099.216 allowed an attacker in a privileged network position to install a malicious extension via a crafted HTML page. (Chromium security severity: High) (CVE-2024-0333)

- Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability (CVE-2024-20675)

- Acrobat Reader T5 (MSFT Edge) versions 120.0.2210.91 and earlier are affected by an Improper Input Validation vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. (CVE-2024-20709, CVE-2024-20721)

- Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability (CVE-2024-21337)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 120.0.2210.133 or later.
Risk Factor
High
CVSS v3.0 Base Score
6.3 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L)
CVSS v3.0 Temporal Score
5.5 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0231
CVSS v2.0 Base Score
7.5 (CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P)
CVSS v2.0 Temporal Score
5.5 (CVSS2#E:U/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2024-0333
CVE CVE-2024-20675
CVE CVE-2024-20709
CVE CVE-2024-20721
CVE CVE-2024-21337
XREF IAVA:2024-A-0040-S
Plugin Information
Published: 2024/01/18, Modified: 2024/05/03
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 120.0.2210.133
205697 - Microsoft Edge (Chromium) < 127.0.2651.105 (CVE-2024-43472)
-
Synopsis
The remote host has an web browser installed that is affected by a vulnerability.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 127.0.2651.105. It is, therefore, affected by a vulnerability as referenced in the August 15, 2024 advisory.

- Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability (CVE-2024-43472)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 127.0.2651.105 or later.
Risk Factor
High
CVSS v3.0 Base Score
8.3 (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.2 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0022
CVSS v2.0 Base Score
7.6 (CVSS2#AV:N/AC:H/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
5.6 (CVSS2#E:U/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2024-43472
XREF IAVA:2024-A-0511
Plugin Information
Published: 2024/08/16, Modified: 2024/08/29
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 127.0.2651.105
207516 - Microsoft Edge (Chromium) < 129.0.2792.52 (CVE-2025-29806)
-
Synopsis
The remote host has an web browser installed that is affected by a vulnerability.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 129.0.2792.52. It is, therefore, affected by a vulnerability as referenced in the March 21, 2025 advisory.

- No cwe for this issue in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. (CVE-2025-29806)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 129.0.2792.52 or later.
Risk Factor
High
CVSS v3.0 Base Score
6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)
CVSS v3.0 Temporal Score
5.7 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0007
CVSS v2.0 Base Score
7.8 (CVSS2#AV:N/AC:L/Au:N/C:C/I:N/A:N)
CVSS v2.0 Temporal Score
5.8 (CVSS2#E:U/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2025-29806
XREF IAVA:2024-A-0597-S
Plugin Information
Published: 2024/09/20, Modified: 2025/03/28
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 129.0.2792.52
234325 - Microsoft Edge (Chromium) < 135.0.3179.73 (CVE-2025-29834)
-
Synopsis
The remote host has an web browser installed that is affected by a vulnerability.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 135.0.3179.73. It is, therefore, affected by a vulnerability as referenced in the April 11, 2025 advisory.

- Out-of-bounds read in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. (CVE-2025-29834)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 135.0.3179.73 or later.
Risk Factor
High
CVSS v3.0 Base Score
7.5 (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
6.5 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0004
CVSS v2.0 Base Score
7.6 (CVSS2#AV:N/AC:H/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
5.6 (CVSS2#E:U/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2025-29834
XREF IAVA:2025-A-0262-S
Plugin Information
Published: 2025/04/14, Modified: 2025/05/23
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 135.0.3179.73
235086 - Microsoft Edge (Chromium) < 136.0.3240.50 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 136.0.3240.50. It is, therefore, affected by multiple vulnerabilities as referenced in the May 1, 2025 advisory.

- User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. (CVE-2025-29825)

- Out of bounds memory access in DevTools. (CVE-2025-4050)

- Insufficient data validation in DevTools. (CVE-2025-4051)

- Inappropriate implementation in DevTools. (CVE-2025-4052)

- Heap buffer overflow in HTML. (CVE-2025-4096)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 136.0.3240.50 or later.
Risk Factor
High
CVSS v3.0 Base Score
6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)
CVSS v3.0 Temporal Score
5.7 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0007
CVSS v2.0 Base Score
7.8 (CVSS2#AV:N/AC:L/Au:N/C:C/I:N/A:N)
CVSS v2.0 Temporal Score
5.8 (CVSS2#E:U/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2025-4050
CVE CVE-2025-4051
CVE CVE-2025-4052
CVE CVE-2025-4096
CVE CVE-2025-29825
XREF IAVA:2025-A-0312-S
Plugin Information
Published: 2025/05/02, Modified: 2025/05/29
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 136.0.3240.50
265451 - Microsoft Edge (Chromium) < 140.0.3485.81 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 140.0.3485.81. It is, therefore, affected by multiple vulnerabilities as referenced in the September 19, 2025 advisory.

- Type Confusion in V8. Reported by Google Threat Analysis Group on 2025-09-16. (CVE-2025-10585)

- Use after free in Dawn. Reported by Giunash (Gyujeong Jin) on 2025-08-03. (CVE-2025-10500)

- Use after free in WebRTC. Reported by sherkito on 2025-08-23. (CVE-2025-10501)

- Heap buffer overflow in ANGLE. Reported by Google Big Sleep on 2025-08-12. (CVE-2025-10502)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 140.0.3485.81 or later.
Risk Factor
High
CVSS v3.0 Base Score
9.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
9.1 (CVSS:3.0/E:F/RL:O/RC:C)
EPSS Score
0.0483
CVSS v2.0 Base Score
7.5 (CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P)
CVSS v2.0 Temporal Score
6.2 (CVSS2#E:F/RL:OF/RC:C)
References
CVE CVE-2025-10500
CVE CVE-2025-10501
CVE CVE-2025-10502
CVE CVE-2025-10585
XREF CISA-KNOWN-EXPLOITED:2025/10/14
Plugin Information
Published: 2025/09/19, Modified: 2025/09/25
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 140.0.3485.81
269904 - Microsoft Edge (Chromium) < 141.0.3537.71 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 141.0.3537.71. It is, therefore, affected by multiple vulnerabilities as referenced in the October 9, 2025 advisory.

- Use after free in Storage. (CVE-2025-11460)

- Heap buffer overflow in Sync. (CVE-2025-11458)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 141.0.3537.71 or later.
Risk Factor
High
CVSS v3.0 Base Score
9.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
8.5 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0004
CVSS v2.0 Base Score
7.5 (CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P)
CVSS v2.0 Temporal Score
5.5 (CVSS2#E:U/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2025-11458
CVE CVE-2025-11460
XREF IAVA:2025-A-0754
Plugin Information
Published: 2025/10/09, Modified: 2025/10/17
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 141.0.3537.71
270728 - Microsoft Edge (Chromium) < 141.0.3537.85 (CVE-2025-11756)
-
Synopsis
The remote host has an web browser installed that is affected by a vulnerability.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 141.0.3537.85. It is, therefore, affected by a vulnerability as referenced in the October 17, 2025 advisory.

- Use after free in Safe Browsing. (CVE-2025-11756)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 141.0.3537.85 or later.
Risk Factor
High
CVSS v3.0 Base Score
9.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
8.5 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0004
CVSS v2.0 Base Score
7.5 (CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P)
CVSS v2.0 Temporal Score
5.5 (CVSS2#E:U/RL:OF/RC:C)
References
Plugin Information
Published: 2025/10/18, Modified: 2025/10/18
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 141.0.3537.85
272126 - Microsoft Edge (Chromium) < 142.0.3595.53 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 142.0.3595.53. It is, therefore, affected by multiple vulnerabilities as referenced in the October 31, 2025 advisory.

- Protection mechanism failure in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. (CVE-2025-60711)

- Inappropriate implementation in V8. (CVE-2025-12036, CVE-2025-12429, CVE-2025-12433)

- Type Confusion in V8. (CVE-2025-12428)

- Object lifecycle issue in Media. (CVE-2025-12430)

- Inappropriate implementation in Extensions. (CVE-2025-12431)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 142.0.3595.53 or later.
Risk Factor
High
CVSS v3.0 Base Score
6.3 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L)
CVSS v3.0 Temporal Score
5.5 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0008
CVSS v2.0 Base Score
7.5 (CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P)
CVSS v2.0 Temporal Score
5.5 (CVSS2#E:U/RL:OF/RC:C)
STIG Severity
I
References
Plugin Information
Published: 2025/10/31, Modified: 2025/11/18
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 142.0.3595.53
277534 - Microsoft Edge (Chromium) < 143.0.3650.66 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 143.0.3650.66. It is, therefore, affected by multiple vulnerabilities as referenced in the December 4, 2025 advisory.

- Inappropriate implementation in WebRTC in Google Chrome prior to 143.0.7499.41 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: Low) (CVE-2025-13639)

- Type Confusion in V8 in Google Chrome prior to 143.0.7499.41 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2025-13630)

- Inappropriate implementation in Google Updater in Google Chrome on Mac prior to 143.0.7499.41 allowed a remote attacker to perform privilege escalation via a crafted file. (Chromium security severity: High) (CVE-2025-13631)

- Inappropriate implementation in DevTools in Google Chrome prior to 143.0.7499.41 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension. (Chromium security severity: High) (CVE-2025-13632)

- Use after free in Digital Credentials in Google Chrome prior to 143.0.7499.41 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.
(Chromium security severity: High) (CVE-2025-13633)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 143.0.3650.66 or later.
Risk Factor
High
CVSS v3.0 Base Score
8.1 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N)
CVSS v3.0 Temporal Score
7.1 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0007
CVSS v2.0 Base Score
9.4 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:N)
CVSS v2.0 Temporal Score
7.0 (CVSS2#E:U/RL:OF/RC:C)
References
Plugin Information
Published: 2025/12/05, Modified: 2025/12/05
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 143.0.3650.66
153368 - Microsoft Edge (Chromium) < 93.0.961.44 Vulnerability
-
Synopsis
The remote host has an web browser installed that is affected by a vulnerability
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 93.0.961.44. It is, therefore, affected by a vulnerability as referenced in the September 9, 2021 advisory.

- Microsoft Edge (Chromium-based) Tampering Vulnerability (CVE-2021-38669)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 93.0.961.44 or later.
Risk Factor
High
CVSS v3.0 Base Score
6.4 (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)
CVSS v3.0 Temporal Score
5.6 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0071
CVSS v2.0 Base Score
7.5 (CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P)
CVSS v2.0 Temporal Score
5.5 (CVSS2#E:U/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2021-38669
XREF IAVA:2021-A-0432-S
Plugin Information
Published: 2021/09/14, Modified: 2023/12/29
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 93.0.961.44
156545 - Microsoft Edge (Chromium) < 97.0.1072.55 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 97.0.1072.55. It is, therefore, affected by multiple vulnerabilities as referenced in the January 6, 2022 advisory.

- Use after free in File Manager API in Google Chrome on Chrome OS prior to 97.0.4692.71 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. (CVE-2022-0107)

- Use after free in Storage in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (CVE-2022-0096)

- Inappropriate implementation in DevTools in Google Chrome prior to 97.0.4692.71 allowed an attacker who convinced a user to install a malicious extension to to potentially allow extension to escape the sandbox via a crafted HTML page. (CVE-2022-0097)

- Use after free in Screen Capture in Google Chrome on Chrome OS prior to 97.0.4692.71 allowed an attacker who convinced a user to perform specific user gestures to potentially exploit heap corruption via specific user gestures. (CVE-2022-0098)

- Use after free in Sign-in in Google Chrome prior to 97.0.4692.71 allowed a remote attacker who convinced a user to perform specific user gestures to potentially exploit heap corruption via specific user gesture.
(CVE-2022-0099)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
See Also
http://www.nessus.org/u?10ad4694
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-0096
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-0097
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-0098
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-0099
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-0100
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-0101
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-0102
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-0103
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-0104
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-0105
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-0106
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-0107
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-0108
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-0109
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-0110
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-0111
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-0112
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-0113
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-0114
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-0115
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-0116
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-0117
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-0118
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-0120
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21929
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21930
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21931
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21954
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21970
Solution
Upgrade to Microsoft Edge version 97.0.1072.55 or later.
Risk Factor
High
CVSS v3.0 Base Score
9.6 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
8.6 (CVSS:3.0/E:P/RL:O/RC:C)
EPSS Score
0.008
CVSS v2.0 Base Score
8.3 (CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:C)
CVSS v2.0 Temporal Score
6.5 (CVSS2#E:POC/RL:OF/RC:C)
References
Plugin Information
Published: 2022/01/06, Modified: 2022/05/06
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 97.0.1072.55
140132 - Microsoft Windows Defender Elevation of Privilege Vulnerability (CVE-2020-1163 & CVE-2020-1170)
-
Synopsis
An antimalware application installed on the remote host is affected by an elevation of privilege vulnerability.
Description
The version of Microsoft Windows Defender component MpCmdRun.exe installed on the remote Windows host is prior to 4.18.2005.1. It is, therefore, affected by a elevation of privilege vulnerability which could allow an attacker who successfully exploited this vulnerability to elevate privileges on the system.
See Also
Solution
Enable automatic updates to update the scan engine for the relevant antimalware applications. Refer to Knowledge Base Article 2510781 for information on how to verify that MMPE has been updated.
Risk Factor
High
CVSS v3.0 Base Score
7.8 (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.0 (CVSS:3.0/E:P/RL:O/RC:C)
EPSS Score
0.0037
CVSS v2.0 Base Score
7.2 (CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
5.6 (CVSS2#E:POC/RL:OF/RC:C)
STIG Severity
II
References
CVE CVE-2020-1163
CVE CVE-2020-1170
XREF IAVA:2019-A-0294
XREF CWE:269
Plugin Information
Published: 2020/09/02, Modified: 2024/02/22
Plugin Output

tcp/445/cifs


Path : C:\Program Files\Windows Defender\
Installed version : 4.18.1909.6
Fixed version : 4.18.2005.1
10412 - Microsoft Windows SMB Registry : Autologon Enabled
-
Synopsis
Anyone can logon to the remote system.
Description
This script determines whether the autologon feature is enabled. This feature allows an intruder to log into the remote host as DefaultUserName with the password DefaultPassword.
See Also
Solution
Delete the keys AutoAdminLogon and DefaultPassword under HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
Risk Factor
High
CVSS v3.0 Base Score
8.4 (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
CVSS v2.0 Base Score
7.2 (CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C)
References
MSKB 324737
Plugin Information
Published: 2000/05/20, Modified: 2022/08/16
Plugin Output

tcp/445/cifs

Autologon is enabled on this host.
This allows an attacker to access the domain: swansea.acca as testuser@swansea.acca/w******s

Note: The password displayed has been partially obfuscated.
144886 - Security Update for Forefront Endpoint Protection (January 2021)
-
Synopsis
An antimalware application installed on the remote host is affected by a remote code execution vulnerability.
Description
The Malware Protection Engine version of Forefront Endpoint Protection installed on the remote Windows host is prior to 1.1.17600.5. It is, therefore, affected by an unspecified remote code execution vulnerability. An authenticated, local attacker can exploit this to bypass authentication and execute arbitrary code with administrator privileges.
See Also
Solution
Enable automatic updates to update the malware engine for the relevant antimalware applications. Refer to Knowledge Base Article 2510781 for information on how to verify that MMPE has been updated.
Risk Factor
High
CVSS v3.0 Base Score
7.8 (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.5 (CVSS:3.0/E:H/RL:O/RC:C)
EPSS Score
0.7399
CVSS v2.0 Base Score
7.2 (CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
6.3 (CVSS2#E:H/RL:OF/RC:C)
References
CVE CVE-2021-1647
XREF CISA-KNOWN-EXPLOITED:2021/11/17
XREF CEA-ID:CEA-2021-0001
Plugin Information
Published: 2021/01/12, Modified: 2022/12/07
Plugin Output

tcp/445/cifs


Path : C:\Program Files\Windows Defender\
Installed version : 1.1.16400.2
Fixed version : 1.1.17700.4
144876 - Security Update for Windows Defender (January 2021)
-
Synopsis
An antimalware application installed on the remote host is affected by a remote code execution vulnerability.
Description
The Malware Protection Engine version of Microsoft Windows Defender installed on the remote Windows host is prior to 1.1.17600.5. It is, therefore, affected by an unspecified remote code execution vulnerability. An authenticated, local attacker can exploit this to bypass authentication and execute arbitrary code with administrator privileges.
See Also
Solution
Enable automatic updates to update the malware engine for the relevant antimalware applications. Refer to Knowledge Base Article 2510781 for information on how to verify that MMPE has been updated.
Risk Factor
High
CVSS v3.0 Base Score
7.8 (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.5 (CVSS:3.0/E:H/RL:O/RC:C)
EPSS Score
0.7399
CVSS v2.0 Base Score
7.2 (CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
6.3 (CVSS2#E:H/RL:OF/RC:C)
References
CVE CVE-2021-1647
XREF CISA-KNOWN-EXPLOITED:2021/11/17
XREF CEA-ID:CEA-2021-0001
Plugin Information
Published: 2021/01/12, Modified: 2022/12/07
Plugin Output

tcp/445/cifs


Path : C:\Program Files\Windows Defender\
Installed version : 1.1.16400.2
Fixed version : 1.1.17700.4
151647 - Security Update for Windows Defender (July 2021)
-
Synopsis
An antimalware application installed on the remote host is affected by multiple vulnerabilities.
Description
The Malware Protection Engine version of Microsoft Windows Defender installed on the remote Windows host is prior to 1.1.18242.0. It is, therefore, affected by multiple remote code execution vulnerabilities. An attacker can exploit one of these vulnerabilities to bypass authentication and execute unauthorized arbitrary commands.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
See Also
Solution
Enable automatic updates to update the malware engine for the relevant antimalware applications.
Risk Factor
High
CVSS v3.0 Base Score
7.8 (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.2 (CVSS:3.0/E:F/RL:O/RC:C)
EPSS Score
0.0107
CVSS v2.0 Base Score
9.3 (CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.7 (CVSS2#E:F/RL:OF/RC:C)
References
Plugin Information
Published: 2021/07/15, Modified: 2023/12/08
Plugin Output

tcp/445/cifs


Path : C:\Program Files\Windows Defender\
Installed version : 1.1.16400.2
Fixed version : 1.1.18242.0
179664 - Security Updates for Microsoft .NET Framework (August 2023)
-
Synopsis
The Microsoft .NET Framework installation on the remote host is missing a security update.
Description
The Microsoft .NET Framework installation on the remote host is missing a security update. It is, therefore, affected by multiple vulnerabilities, as follows:

- A remote code execution vulnerability in applications running on IIS using their parent application's Application Pool which can lead to privilege escalation and other security bypasses. (CVE-2023-36899)

- A spoofing vulnerability where an unauthenticated remote attacker can sign ClickOnce deployments without a valid code signing certificate. (CVE-2023-36873)
See Also
http://www.nessus.org/u?31a7e1cb
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36873
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36899
https://support.microsoft.com/en-us/help/5028946
https://support.microsoft.com/en-us/help/5028947
https://support.microsoft.com/en-us/help/5028948
https://support.microsoft.com/en-us/help/5028950
https://support.microsoft.com/en-us/help/5028951
https://support.microsoft.com/en-us/help/5028952
https://support.microsoft.com/en-us/help/5028953
https://support.microsoft.com/en-us/help/5028954
https://support.microsoft.com/en-us/help/5028955
https://support.microsoft.com/en-us/help/5028956
https://support.microsoft.com/en-us/help/5028957
https://support.microsoft.com/en-us/help/5028958
https://support.microsoft.com/en-us/help/5028960
https://support.microsoft.com/en-us/help/5028961
https://support.microsoft.com/en-us/help/5028962
https://support.microsoft.com/en-us/help/5028963
https://support.microsoft.com/en-us/help/5028967
https://support.microsoft.com/en-us/help/5028968
https://support.microsoft.com/en-us/help/5028969
https://support.microsoft.com/en-us/help/5028970
https://support.microsoft.com/en-us/help/5028973
https://support.microsoft.com/en-us/help/5028974
https://support.microsoft.com/en-us/help/5028975
https://support.microsoft.com/en-us/help/5028976
https://support.microsoft.com/en-us/help/5028977
https://support.microsoft.com/en-us/help/5028978
https://support.microsoft.com/en-us/help/5028979
https://support.microsoft.com/en-us/help/5028980
https://support.microsoft.com/en-us/help/5028981
https://support.microsoft.com/en-us/help/5028982
Solution
Microsoft has released security updates for Microsoft .NET Framework.
Risk Factor
High
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.9 (CVSS:3.0/E:P/RL:O/RC:C)
EPSS Score
0.6966
CVSS v2.0 Base Score
9.0 (CVSS2#AV:N/AC:L/Au:S/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.0 (CVSS2#E:POC/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2023-36873
CVE CVE-2023-36899
MSKB 5028946
MSKB 5028947
MSKB 5028948
MSKB 5028950
MSKB 5028951
MSKB 5028952
MSKB 5028953
MSKB 5028954
MSKB 5028955
MSKB 5028956
MSKB 5028957
MSKB 5028958
MSKB 5028960
MSKB 5028961
MSKB 5028962
MSKB 5028963
MSKB 5028967
MSKB 5028968
MSKB 5028969
MSKB 5028970
MSKB 5028973
MSKB 5028974
MSKB 5028975
MSKB 5028976
MSKB 5028977
MSKB 5028978
MSKB 5028979
MSKB 5028980
MSKB 5028981
MSKB 5028982
XREF MSFT:MS23-5028946
XREF MSFT:MS23-5028947
XREF MSFT:MS23-5028948
XREF MSFT:MS23-5028950
XREF MSFT:MS23-5028951
XREF MSFT:MS23-5028952
XREF MSFT:MS23-5028953
XREF MSFT:MS23-5028954
XREF MSFT:MS23-5028955
XREF MSFT:MS23-5028956
XREF MSFT:MS23-5028957
XREF MSFT:MS23-5028958
XREF MSFT:MS23-5028960
XREF MSFT:MS23-5028961
XREF MSFT:MS23-5028962
XREF MSFT:MS23-5028963
XREF MSFT:MS23-5028967
XREF MSFT:MS23-5028968
XREF MSFT:MS23-5028969
XREF MSFT:MS23-5028970
XREF MSFT:MS23-5028973
XREF MSFT:MS23-5028974
XREF MSFT:MS23-5028975
XREF MSFT:MS23-5028976
XREF MSFT:MS23-5028977
XREF MSFT:MS23-5028978
XREF MSFT:MS23-5028979
XREF MSFT:MS23-5028980
XREF MSFT:MS23-5028981
XREF MSFT:MS23-5028982
XREF IAVA:2023-A-0406-S
Plugin Information
Published: 2023/08/10, Modified: 2023/09/15
Plugin Output

tcp/445/cifs


Microsoft .NET Framework 4.8
The remote host is missing one of the following rollup KBs :

Cumulative
- 5028951

C:\Windows\Microsoft.NET\Framework\v4.0.30319\system.windows.forms.dll has not been patched.
Remote version : 4.8.4550.0
Should be : 4.8.4654.0

168745 - Security Updates for Microsoft .NET Framework (December 2022)
-
Synopsis
The Microsoft .NET Framework installation on the remote host is missing a security update.
Description
The Microsoft .NET Framework installation on the remote host is missing a security update. It is, therefore, affected by a remote code execution vulnerability in the handling of XPS files.
See Also
http://www.nessus.org/u?0d29de7c
http://www.nessus.org/u?e40dadbd
https://support.microsoft.com/en-us/help/5020859
https://support.microsoft.com/en-us/help/5020860
https://support.microsoft.com/en-us/help/5020861
https://support.microsoft.com/en-us/help/5020862
https://support.microsoft.com/en-us/help/5020866
https://support.microsoft.com/en-us/help/5020867
https://support.microsoft.com/en-us/help/5020868
https://support.microsoft.com/en-us/help/5020869
https://support.microsoft.com/en-us/help/5020872
https://support.microsoft.com/en-us/help/5020873
https://support.microsoft.com/en-us/help/5020874
https://support.microsoft.com/en-us/help/5020875
https://support.microsoft.com/en-us/help/5020876
https://support.microsoft.com/en-us/help/5020877
https://support.microsoft.com/en-us/help/5020878
https://support.microsoft.com/en-us/help/5020879
https://support.microsoft.com/en-us/help/5020880
https://support.microsoft.com/en-us/help/5020881
https://support.microsoft.com/en-us/help/5020882
https://support.microsoft.com/en-us/help/5020883
https://support.microsoft.com/en-us/help/5020894
https://support.microsoft.com/en-us/help/5020895
https://support.microsoft.com/en-us/help/5020896
https://support.microsoft.com/en-us/help/5020897
https://support.microsoft.com/en-us/help/5020898
https://support.microsoft.com/en-us/help/5020899
https://support.microsoft.com/en-us/help/5020900
https://support.microsoft.com/en-us/help/5020901
https://support.microsoft.com/en-us/help/5020902
https://support.microsoft.com/en-us/help/5020903
Solution
Microsoft has released security updates for Microsoft .NET Framework.
Risk Factor
High
CVSS v3.0 Base Score
7.8 (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
6.8 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0893
CVSS v2.0 Base Score
7.2 (CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
5.3 (CVSS2#E:U/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2022-41089
MSKB 5020859
MSKB 5020860
MSKB 5020861
MSKB 5020862
MSKB 5020866
MSKB 5020867
MSKB 5020868
MSKB 5020869
MSKB 5020872
MSKB 5020873
MSKB 5020874
MSKB 5020875
MSKB 5020876
MSKB 5020877
MSKB 5020878
MSKB 5020879
MSKB 5020880
MSKB 5020881
MSKB 5020882
MSKB 5020883
MSKB 5020894
MSKB 5020895
MSKB 5020896
MSKB 5020897
MSKB 5020898
MSKB 5020899
MSKB 5020900
MSKB 5020901
MSKB 5020902
MSKB 5020903
XREF MSFT:MS22-5020859
XREF MSFT:MS22-5020860
XREF MSFT:MS22-5020861
XREF MSFT:MS22-5020862
XREF MSFT:MS22-5020866
XREF MSFT:MS22-5020867
XREF MSFT:MS22-5020868
XREF MSFT:MS22-5020869
XREF MSFT:MS22-5020872
XREF MSFT:MS22-5020873
XREF MSFT:MS22-5020874
XREF MSFT:MS22-5020875
XREF MSFT:MS22-5020876
XREF MSFT:MS22-5020877
XREF MSFT:MS22-5020878
XREF MSFT:MS22-5020879
XREF MSFT:MS22-5020880
XREF MSFT:MS22-5020881
XREF MSFT:MS22-5020882
XREF MSFT:MS22-5020883
XREF MSFT:MS22-5020894
XREF MSFT:MS22-5020895
XREF MSFT:MS22-5020896
XREF MSFT:MS22-5020897
XREF MSFT:MS22-5020898
XREF MSFT:MS22-5020899
XREF MSFT:MS22-5020900
XREF MSFT:MS22-5020901
XREF MSFT:MS22-5020902
XREF MSFT:MS22-5020903
XREF IAVA:2022-A-0534-S
Plugin Information
Published: 2022/12/15, Modified: 2023/11/20
Plugin Output

tcp/445/cifs


Microsoft .NET Framework 4.8
The remote host is missing one of the following rollup KBs :

Cumulative
- 5020872

C:\Windows\Microsoft.NET\Framework\v4.0.30319\system.core.dll has not been patched.
Remote version : 4.8.4536.0
Should be : 4.8.4590.0

171598 - Security Updates for Microsoft .NET Framework (February 2023)
-
Synopsis
The Microsoft .NET Framework installation on the remote host is missing a security update.
Description
The Microsoft .NET Framework installation on the remote host is missing a security update. It is, therefore, affected by multiple vulnerabilities, as follows:

- A denial of service (DoS) vulnerability. (CVE-2023-21722)

- A remote code execution vulnerability. (CVE-2023-21808)
See Also
http://www.nessus.org/u?5bd7d30c
http://www.nessus.org/u?42dae88f
http://www.nessus.org/u?db0b1765
https://support.microsoft.com/en-us/help/5022497
https://support.microsoft.com/en-us/help/5022498
https://support.microsoft.com/en-us/help/5022499
https://support.microsoft.com/en-us/help/5022501
https://support.microsoft.com/en-us/help/5022502
https://support.microsoft.com/en-us/help/5022503
https://support.microsoft.com/en-us/help/5022504
https://support.microsoft.com/en-us/help/5022505
https://support.microsoft.com/en-us/help/5022506
https://support.microsoft.com/en-us/help/5022507
https://support.microsoft.com/en-us/help/5022508
https://support.microsoft.com/en-us/help/5022509
https://support.microsoft.com/en-us/help/5022511
https://support.microsoft.com/en-us/help/5022512
https://support.microsoft.com/en-us/help/5022513
https://support.microsoft.com/en-us/help/5022514
https://support.microsoft.com/en-us/help/5022515
https://support.microsoft.com/en-us/help/5022516
https://support.microsoft.com/en-us/help/5022520
https://support.microsoft.com/en-us/help/5022521
https://support.microsoft.com/en-us/help/5022522
https://support.microsoft.com/en-us/help/5022523
https://support.microsoft.com/en-us/help/5022524
https://support.microsoft.com/en-us/help/5022525
https://support.microsoft.com/en-us/help/5022526
https://support.microsoft.com/en-us/help/5022529
https://support.microsoft.com/en-us/help/5022530
https://support.microsoft.com/en-us/help/5022531
https://support.microsoft.com/en-us/help/5022574
https://support.microsoft.com/en-us/help/5022575
Solution
Microsoft has released security updates for Microsoft .NET Framework.
Risk Factor
High
CVSS v3.0 Base Score
7.8 (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.2 (CVSS:3.0/E:F/RL:O/RC:C)
EPSS Score
0.0118
CVSS v2.0 Base Score
7.2 (CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
6.0 (CVSS2#E:F/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2023-21722
CVE CVE-2023-21808
MSKB 5022497
MSKB 5022498
MSKB 5022499
MSKB 5022501
MSKB 5022502
MSKB 5022503
MSKB 5022504
MSKB 5022505
MSKB 5022506
MSKB 5022507
MSKB 5022508
MSKB 5022509
MSKB 5022511
MSKB 5022512
MSKB 5022513
MSKB 5022514
MSKB 5022515
MSKB 5022516
MSKB 5022520
MSKB 5022521
MSKB 5022522
MSKB 5022523
MSKB 5022524
MSKB 5022525
MSKB 5022526
MSKB 5022529
MSKB 5022530
MSKB 5022531
MSKB 5022574
MSKB 5022575
XREF MSFT:MS23-5022497
XREF MSFT:MS23-5022498
XREF MSFT:MS23-5022499
XREF MSFT:MS23-5022501
XREF MSFT:MS23-5022502
XREF MSFT:MS23-5022503
XREF MSFT:MS23-5022504
XREF MSFT:MS23-5022505
XREF MSFT:MS23-5022506
XREF MSFT:MS23-5022507
XREF MSFT:MS23-5022508
XREF MSFT:MS23-5022509
XREF MSFT:MS23-5022511
XREF MSFT:MS23-5022512
XREF MSFT:MS23-5022513
XREF MSFT:MS23-5022514
XREF MSFT:MS23-5022515
XREF MSFT:MS23-5022516
XREF MSFT:MS23-5022520
XREF MSFT:MS23-5022521
XREF MSFT:MS23-5022522
XREF MSFT:MS23-5022523
XREF MSFT:MS23-5022524
XREF MSFT:MS23-5022525
XREF MSFT:MS23-5022526
XREF MSFT:MS23-5022529
XREF MSFT:MS23-5022530
XREF MSFT:MS23-5022531
XREF MSFT:MS23-5022574
XREF MSFT:MS23-5022575
XREF IAVA:2023-A-0087-S
Plugin Information
Published: 2023/02/17, Modified: 2023/09/04
Plugin Output

tcp/445/cifs


Microsoft .NET Framework 4.8
The remote host is missing one of the following rollup KBs :

Cumulative
- 5022502

C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorlib.dll has not been patched.
Remote version : 4.8.4515.0
Should be : 4.8.4614.0

208757 - Security Updates for Microsoft .NET Framework (October 2024)
-
Synopsis
The Microsoft .NET Framework installation on the remote host is missing a security update.
Description
The Microsoft .NET Framework installation on the remote host is missing a security update. It is, therefore, affected by multiple denial of service vulnerabilities, as follows:

- A denial of service (DoS) vulnerability. An attacker can exploit this issue to cause the affected component to deny system or application services. (CVE-2024-43483, CVE-2024-43484)

Note that Nessus has relied upon on the application's self-reported version number.
See Also
Solution
Microsoft has released security updates for Microsoft .NET Framework.
Risk Factor
High
CVSS v3.0 Base Score
7.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
CVSS v3.0 Temporal Score
6.5 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0338
CVSS v2.0 Base Score
7.8 (CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C)
CVSS v2.0 Temporal Score
5.8 (CVSS2#E:U/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2024-43483
CVE CVE-2024-43484
MSKB 5044009
MSKB 5044010
MSKB 5044011
MSKB 5044012
MSKB 5044016
MSKB 5044017
MSKB 5044018
MSKB 5044019
MSKB 5044021
MSKB 5044022
MSKB 5044023
MSKB 5044024
MSKB 5044025
MSKB 5044026
MSKB 5044028
MSKB 5044029
MSKB 5044030
MSKB 5044033
MSKB 5044035
XREF MSFT:MS24-5044009
XREF MSFT:MS24-5044010
XREF MSFT:MS24-5044011
XREF MSFT:MS24-5044012
XREF MSFT:MS24-5044016
XREF MSFT:MS24-5044017
XREF MSFT:MS24-5044018
XREF MSFT:MS24-5044019
XREF MSFT:MS24-5044021
XREF MSFT:MS24-5044022
XREF MSFT:MS24-5044023
XREF MSFT:MS24-5044024
XREF MSFT:MS24-5044025
XREF MSFT:MS24-5044026
XREF MSFT:MS24-5044028
XREF MSFT:MS24-5044029
XREF MSFT:MS24-5044030
XREF MSFT:MS24-5044033
XREF MSFT:MS24-5044035
XREF IAVA:2024-A-0632-S
Plugin Information
Published: 2024/10/11, Modified: 2025/03/31
Plugin Output

tcp/445/cifs


Microsoft .NET Framework 4.8
The remote host is missing one of the following rollup KBs :

Cumulative
- 5044023

C:\Windows\Microsoft.NET\Framework\v4.0.30319\system.web.dll has not been patched.
Remote version : 4.8.4494.0
Should be : 4.8.4762.0

181375 - Security Updates for Microsoft .NET Framework (September 2023)
-
Synopsis
The Microsoft .NET Framework installation on the remote host is missing a security update.
Description
The Microsoft .NET Framework installation on the remote host is missing a security update. It is, therefore, affected by multiple vulnerabilities, as follows:

- Multiple vulnerabilities in DiaSymReader.dll where parsing an corrupted PDB can result in remote code execution. (CVE-2023-36792, CVE-2023-36793, CVE-2023-36794 CVE-2023-36796)

- A vulnerability in the WPF XML parser where an unsandboxed parser can lead to remote code execution.
(CVE-2023-36788)
See Also
http://www.nessus.org/u?3bbdfd35
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36788
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36792
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36793
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36794
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36796
https://support.microsoft.com/en-us/help/5029915
https://support.microsoft.com/en-us/help/5029916
https://support.microsoft.com/en-us/help/5029917
https://support.microsoft.com/en-us/help/5029919
https://support.microsoft.com/en-us/help/5029920
https://support.microsoft.com/en-us/help/5029921
https://support.microsoft.com/en-us/help/5029922
https://support.microsoft.com/en-us/help/5029923
https://support.microsoft.com/en-us/help/5029924
https://support.microsoft.com/en-us/help/5029925
https://support.microsoft.com/en-us/help/5029926
https://support.microsoft.com/en-us/help/5029927
https://support.microsoft.com/en-us/help/5029928
https://support.microsoft.com/en-us/help/5029929
https://support.microsoft.com/en-us/help/5029931
https://support.microsoft.com/en-us/help/5029932
https://support.microsoft.com/en-us/help/5029933
https://support.microsoft.com/en-us/help/5029937
https://support.microsoft.com/en-us/help/5029938
https://support.microsoft.com/en-us/help/5029940
https://support.microsoft.com/en-us/help/5029941
https://support.microsoft.com/en-us/help/5029942
https://support.microsoft.com/en-us/help/5029943
https://support.microsoft.com/en-us/help/5029944
https://support.microsoft.com/en-us/help/5029945
https://support.microsoft.com/en-us/help/5029946
https://support.microsoft.com/en-us/help/5029947
https://support.microsoft.com/en-us/help/5029948
https://support.microsoft.com/en-us/help/5030030
https://support.microsoft.com/en-us/help/5030160
Solution
Microsoft has released security updates for Microsoft .NET Framework.
Risk Factor
High
CVSS v3.0 Base Score
7.8 (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
6.8 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0156
CVSS v2.0 Base Score
7.2 (CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
5.3 (CVSS2#E:U/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2023-36788
CVE CVE-2023-36792
CVE CVE-2023-36793
CVE CVE-2023-36794
CVE CVE-2023-36796
MSKB 5029915
MSKB 5029916
MSKB 5029917
MSKB 5029919
MSKB 5029920
MSKB 5029921
MSKB 5029922
MSKB 5029923
MSKB 5029924
MSKB 5029925
MSKB 5029926
MSKB 5029927
MSKB 5029928
MSKB 5029929
MSKB 5029931
MSKB 5029932
MSKB 5029933
MSKB 5029937
MSKB 5029938
MSKB 5029940
MSKB 5029941
MSKB 5029942
MSKB 5029943
MSKB 5029944
MSKB 5029945
MSKB 5029946
MSKB 5029947
MSKB 5029948
MSKB 5030030
MSKB 5030160
XREF MSFT:MS23-5029916
XREF MSFT:MS23-5029917
XREF MSFT:MS23-5029919
XREF MSFT:MS23-5029920
XREF MSFT:MS23-5029921
XREF MSFT:MS23-5029922
XREF MSFT:MS23-5029923
XREF MSFT:MS23-5029924
XREF MSFT:MS23-5029925
XREF MSFT:MS23-5029926
XREF MSFT:MS23-5029927
XREF MSFT:MS23-5029928
XREF MSFT:MS23-5029929
XREF MSFT:MS23-5029931
XREF MSFT:MS23-5029932
XREF MSFT:MS23-5029933
XREF MSFT:MS23-5029937
XREF MSFT:MS23-5029938
XREF MSFT:MS23-5029940
XREF MSFT:MS23-5029941
XREF MSFT:MS23-5029942
XREF MSFT:MS23-5029943
XREF MSFT:MS23-5029944
XREF MSFT:MS23-5029945
XREF MSFT:MS23-5029946
XREF MSFT:MS23-5029947
XREF MSFT:MS23-5029948
XREF MSFT:MS23-5030030
XREF MSFT:MS23-5030160
XREF IAVA:2023-A-0470-S
Plugin Information
Published: 2023/09/13, Modified: 2023/11/16
Plugin Output

tcp/445/cifs


Microsoft .NET Framework 4.8
The remote host is missing one of the following rollup KBs :

Cumulative
- 5029923

C:\Windows\Microsoft.NET\Framework\v4.0.30319\diasymreader.dll has not been patched.
Remote version : 14.8.4084.0
Should be : 14.8.4667.0

135719 - Security Updates for Windows Defender (April 2020)
-
Synopsis
An antimalware application installed on the remote host is affected by a hard link elevation of privilege vulnerability.
Description
The engine version of Microsoft Windows Defender installed on the remote Windows host is prior to 4.18.2001.112. It is, therefore, affected by a hard link elevation of privilege vulnerability which could allow an attacker who successfully exploited this vulnerability to elevate privileges on the system.
See Also
Solution
Enable automatic updates to update the scan engine for the relevant antimalware applications. Refer to Knowledge Base Article 2510781 for information on how to verify that MMPE has been updated.
Risk Factor
High
CVSS v3.0 Base Score
7.8 (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
6.8 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0027
CVSS v2.0 Base Score
7.2 (CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
5.3 (CVSS2#E:U/RL:OF/RC:C)
References
Plugin Information
Published: 2020/04/17, Modified: 2020/05/19
Plugin Output

tcp/445/cifs


Path : C:\Program Files\Windows Defender\
Installed version : 4.18.1909.6
Fixed version : 4.18.2001.112
174162 - Security Updates for Windows Defender (April 2023)
-
Synopsis
An antimalware application installed on the remote host is affected by a denial of service vulnerability.
Description
The Malware Protection Engine version of Microsoft Windows Defender installed on the remote Windows host is prior to 1.1.20200.4. It is, therefore, affected by a denial of service vulnerability.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
See Also
Solution
Microsoft has released KB2267602 to address this issue.
Risk Factor
High
CVSS v3.0 Base Score
7.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
CVSS v3.0 Temporal Score
6.5 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0367
CVSS v2.0 Base Score
7.8 (CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C)
CVSS v2.0 Temporal Score
5.8 (CVSS2#E:U/RL:OF/RC:C)
References
CVE CVE-2023-24860
MSKB 2267602
XREF MSFT:MS23-2267602
Plugin Information
Published: 2023/04/12, Modified: 2023/04/13
Plugin Output

tcp/445/cifs


Path : C:\Program Files\Windows Defender\
Installed version : 1.1.16400.2
Fixed version : 1.1.20200.4
186903 - Security Updates for Windows Defender (December 2023)
-
Synopsis
An antimalware application installed on the remote host is affected by a denial of service vulnerability.
Description
The Malware Protection Engine version of Microsoft Windows Defender installed on the remote Windows host is prior to 4.18.23110.3. It is, therefore, affected by a denial of service vulnerability. An attacker can exploit this issue to cause the affected component to deny system or application services.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
See Also
Solution
Update Microsoft Defender version 4.18.23110.3 to address this issue.
Risk Factor
High
CVSS v3.0 Base Score
7.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
CVSS v3.0 Temporal Score
6.5 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.1216
CVSS v2.0 Base Score
7.8 (CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C)
CVSS v2.0 Temporal Score
5.8 (CVSS2#E:U/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2023-36010
XREF IAVA:2023-A-0688-S
Plugin Information
Published: 2023/12/14, Modified: 2024/03/15
Plugin Output

tcp/445/cifs


Path : C:\Program Files\Windows Defender\
Installed version : 4.18.1909.6
Fixed version : 4.18.23110.3
154991 - Security Updates for Windows Defender (November 2021)
-
Synopsis
An antimalware application installed on the remote host is affected by a remote code execution vulnerability.
Description
The Malware Protection Engine version of Microsoft Windows Defender installed on the remote Windows host is equal or prior to 1.1.18700.3. It is, therefore, affected by a remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands.
See Also
Solution
Enable automatic updates to update the malware engine for the relevant antimalware applications. Refer to Knowledge Base Article 2510781 for information on how to verify that MMPE has been updated.
Risk Factor
High
CVSS v3.0 Base Score
7.8 (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.2 (CVSS:3.0/E:F/RL:O/RC:C)
EPSS Score
0.0102
CVSS v2.0 Base Score
9.3 (CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
7.7 (CVSS2#E:F/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2021-42298
XREF IAVA:2022-A-0005
Plugin Information
Published: 2021/11/09, Modified: 2023/11/24
Plugin Output

tcp/445/cifs


Path : C:\Program Files\Windows Defender\
Installed version : 1.1.16400.2
Fixed version : 1.1.18700.3
181341 - Security Updates for Windows Defender (September 2023)
-
Synopsis
An antimalware application installed on the remote host is affected by an attack surface reduction vulnerability.
Description
The Malware Protection Engine version of Microsoft Windows Defender installed on the remote Windows host is prior to 1.1.23080.2005. It is, therefore, affected by an attack surface reduction vulnerability due to security features bypass. A remote attacker can trick a victim to open a specially crafted file and bypass the Windows Defender Attack Surface Reduction blocking feature.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Note: this plugin will not fire if Windows Defender is disabled.
See Also
Solution
Update Microsoft Defender to engine version 1.1.23080.2005 to address this issue.
Risk Factor
High
CVSS v3.0 Base Score
7.8 (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
6.8 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0086
CVSS v2.0 Base Score
7.2 (CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
5.3 (CVSS2#E:U/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2023-38163
XREF IAVA:2023-A-0488-S
Plugin Information
Published: 2023/09/13, Modified: 2024/06/13
Plugin Output

tcp/445/cifs


Path : C:\Program Files\Windows Defender\
Installed version : 1.1.16400.2
Fixed version : 1.1.23080.2005
166555 - WinVerifyTrust Signature Validation CVE-2013-3900 Mitigation (EnableCertPaddingCheck)
-
Synopsis
The remote Windows host is potentially missing a mitigation for a remote code execution vulnerability.
Description
The remote system may be in a vulnerable state to CVE-2013-3900 due to a missing or misconfigured registry keys:
- HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\Wintrust\Config\EnableCertPaddingCheck
- HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Cryptography\Wintrust\Config\EnableCertPaddingCheck An unauthenticated, remote attacker could exploit this, by sending specially crafted requests, to execute arbitrary code on an affected host.
See Also
Solution
Add and enable registry value EnableCertPaddingCheck:
- HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\Wintrust\Config\EnableCertPaddingCheck

Additionally, on 64 Bit OS systems, Add and enable registry value EnableCertPaddingCheck:

- HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Cryptography\Wintrust\Config\EnableCertPaddingCheck
Risk Factor
High
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
8.4 (CVSS:3.0/E:H/RL:O/RC:C)
EPSS Score
0.8023
CVSS v2.0 Base Score
7.6 (CVSS2#AV:N/AC:H/Au:N/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
6.6 (CVSS2#E:H/RL:OF/RC:C)
STIG Severity
II
References
CVE CVE-2013-3900
XREF CISA-KNOWN-EXPLOITED:2022/07/10
XREF IAVA:2013-A-0227
Plugin Information
Published: 2022/10/26, Modified: 2025/12/17
Plugin Output

tcp/445/cifs



Nessus detected the following potentially insecure registry key configuration:
- Software\Microsoft\Cryptography\Wintrust\Config\EnableCertPaddingCheck is not present in the registry.
- Software\Wow6432Node\Microsoft\Cryptography\Wintrust\Config\EnableCertPaddingCheck is not present in the registry.
103569 - Windows Defender Antimalware/Antivirus Signature Definition Check
-
Synopsis
Windows Defender AntiMalware / AntiVirus Signatures are continuously not and should not be more than 1 day old
Description
Windows Defender has an AntiMalware/AntiVirus signature that gets updated continuously. The signature definition has not been updated in more than 1 day.
See Also
Solution
Trigger an update manually and/or enable auto-updates.
Risk Factor
High
Plugin Information
Published: 2017/10/02, Modified: 2024/08/06
Plugin Output

tcp/445/cifs


Malware Signature Timestamp : Sep. 24, 2019 at 05:12:58 GMT
Malware Signature Version : 1.303.25.0
171859 - Curl Use-After-Free < 7.87 (CVE-2022-43552)
-
Synopsis
The remote Windows host has a program that is affected by a use-after-free vulnerability.
Description
The version of Curl installed on the remote host is prior to 7.87.0. It is therefore affected by a use-after-free vulnerability. Curl can be asked to tunnel virtually all protocols it supports through an HTTP proxy. HTTP proxies can (and often do) deny such tunnel operations. When getting denied to tunnel the specific protocols SMB or TELNET, curl would use a heap-allocated struct after it had been freed, in its transfer shutdown code path.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade Curl to version 7.87.0 or later
Risk Factor
Medium
CVSS v3.0 Base Score
5.9 (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
CVSS v3.0 Temporal Score
5.3 (CVSS:3.0/E:P/RL:O/RC:C)
EPSS Score
0.0013
CVSS v2.0 Base Score
5.4 (CVSS2#AV:N/AC:H/Au:N/C:N/I:N/A:C)
CVSS v2.0 Temporal Score
4.2 (CVSS2#E:POC/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2022-43552
XREF IAVA:2023-A-0008-S
Plugin Information
Published: 2023/02/23, Modified: 2024/10/07
Plugin Output

tcp/445/cifs


Path : c:\windows\system32\curl.exe
Installed version : 7.83.1.0
Fixed version : 7.87.0

tcp/445/cifs


Path : c:\windows\syswow64\curl.exe
Installed version : 7.83.1.0
Fixed version : 7.87.0
241563 - KB5062554: Windows 10 version 21H2 / Windows 10 Version 22H2 Security Update (July 2025)
-
Synopsis
The remote Windows host is affected by multiple vulnerabilities.
Description
The remote Windows host is missing security update 5062554. It is, therefore, affected by multiple vulnerabilities

- Buffer over-read in Windows TDX.sys allows an authorized attacker to elevate privileges locally.
(CVE-2025-49659)

- Improper link resolution before file access ('link following') in Windows Update Service allows an authorized attacker to elevate privileges locally. (CVE-2025-48799)

- Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally. (CVE-2025-48820)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Apply Security Update 5062554
Risk Factor
Medium
CVSS v3.0 Base Score
7.8 (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
6.8 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0027
CVSS v2.0 Base Score
6.8 (CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
5.0 (CVSS2#E:U/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2025-36350
CVE CVE-2025-36357
CVE CVE-2025-47159
CVE CVE-2025-47971
CVE CVE-2025-47972
CVE CVE-2025-47973
CVE CVE-2025-47975
CVE CVE-2025-47976
CVE CVE-2025-47980
CVE CVE-2025-47981
CVE CVE-2025-47982
CVE CVE-2025-47984
CVE CVE-2025-47985
CVE CVE-2025-47986
CVE CVE-2025-47987
CVE CVE-2025-47991
CVE CVE-2025-47996
CVE CVE-2025-47999
CVE CVE-2025-48000
CVE CVE-2025-48001
CVE CVE-2025-48003
CVE CVE-2025-48799
CVE CVE-2025-48800
CVE CVE-2025-48803
CVE CVE-2025-48804
CVE CVE-2025-48805
CVE CVE-2025-48806
CVE CVE-2025-48808
CVE CVE-2025-48811
CVE CVE-2025-48814
CVE CVE-2025-48815
CVE CVE-2025-48816
CVE CVE-2025-48817
CVE CVE-2025-48818
CVE CVE-2025-48819
CVE CVE-2025-48820
CVE CVE-2025-48821
CVE CVE-2025-48822
CVE CVE-2025-48823
CVE CVE-2025-49658
CVE CVE-2025-49659
CVE CVE-2025-49660
CVE CVE-2025-49661
CVE CVE-2025-49664
CVE CVE-2025-49665
CVE CVE-2025-49667
CVE CVE-2025-49675
CVE CVE-2025-49678
CVE CVE-2025-49679
CVE CVE-2025-49680
CVE CVE-2025-49682
CVE CVE-2025-49683
CVE CVE-2025-49684
CVE CVE-2025-49685
CVE CVE-2025-49686
CVE CVE-2025-49687
CVE CVE-2025-49689
CVE CVE-2025-49690
CVE CVE-2025-49691
CVE CVE-2025-49721
CVE CVE-2025-49722
CVE CVE-2025-49723
CVE CVE-2025-49724
CVE CVE-2025-49725
CVE CVE-2025-49726
CVE CVE-2025-49727
CVE CVE-2025-49730
CVE CVE-2025-49732
CVE CVE-2025-49733
CVE CVE-2025-49740
CVE CVE-2025-49742
CVE CVE-2025-49744
CVE CVE-2025-49760
CVE CVE-2025-55230
MSKB 5062554
XREF MSFT:MS25-5062554
XREF IAVA:2025-A-0507-S
XREF IAVA:2025-A-0506-S
XREF IAVA:2025-A-0631-S
XREF CWE:20
XREF CWE:23
XREF CWE:59
XREF CWE:73
XREF CWE:122
XREF CWE:125
XREF CWE:126
XREF CWE:190
XREF CWE:191
XREF CWE:197
XREF CWE:200
XREF CWE:284
XREF CWE:306
XREF CWE:326
XREF CWE:349
XREF CWE:353
XREF CWE:362
XREF CWE:367
XREF CWE:400
XREF CWE:415
XREF CWE:416
XREF CWE:476
XREF CWE:591
XREF CWE:693
XREF CWE:787
XREF CWE:820
XREF CWE:822
XREF CWE:843
XREF CWE:862
Plugin Information
Published: 2025/07/08, Modified: 2025/10/29
Plugin Output

tcp/445/cifs


The remote host is missing one of the following rollup KBs :
- 5062554

- C:\Windows\system32\ntoskrnl.exe has not been patched.
Remote version : 10.0.19041.2006
Should be : 10.0.19041.6093
159465 - Microsoft Edge (Chromium) < 100.0.1185.29 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 100.0.1185.29. It is, therefore, affected by multiple vulnerabilities as referenced in the April 1, 2022 advisory.

- Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-26891, CVE-2022-26894, CVE-2022-26895, CVE-2022-26900, CVE-2022-26908, CVE-2022-26909, CVE-2022-26912. (CVE-2022-24475)

- Microsoft Edge (Chromium-based) Spoofing Vulnerability. (CVE-2022-24523)

- Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-24475, CVE-2022-26894, CVE-2022-26895, CVE-2022-26900, CVE-2022-26908, CVE-2022-26909, CVE-2022-26912. (CVE-2022-26891)

- Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-24475, CVE-2022-26891, CVE-2022-26895, CVE-2022-26900, CVE-2022-26908, CVE-2022-26909, CVE-2022-26912. (CVE-2022-26894)

- Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-24475, CVE-2022-26891, CVE-2022-26894, CVE-2022-26900, CVE-2022-26908, CVE-2022-26909, CVE-2022-26912. (CVE-2022-26895)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
http://www.nessus.org/u?471a8cda
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-1125
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-1127
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-1128
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-1129
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-1130
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-1131
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-1133
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-1134
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-1135
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-1136
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-1137
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-1138
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-1139
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-1143
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-1145
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-1146
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26894
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26895
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26900
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26908
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26909
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26912
Solution
Upgrade to Microsoft Edge version 100.0.1185.29 or later.
Risk Factor
Medium
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.9 (CVSS:3.0/E:P/RL:O/RC:C)
EPSS Score
0.0311
CVSS v2.0 Base Score
5.1 (CVSS2#AV:N/AC:H/Au:N/C:P/I:P/A:P)
CVSS v2.0 Temporal Score
4.0 (CVSS2#E:POC/RL:OF/RC:C)
STIG Severity
I
References
Plugin Information
Published: 2022/04/01, Modified: 2023/11/03
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 100.0.1185.29
161717 - Microsoft Edge (Chromium) < 102.0.1245.30 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 102.0.1245.30. It is, therefore, affected by multiple vulnerabilities as referenced in the May 31, 2022 advisory.

- Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-30127. (CVE-2022-30128)

- Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-30128. (CVE-2022-30127)

- Use after free in Indexed DB in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (CVE-2022-1853)

- Use after free in ANGLE in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (CVE-2022-1854)

- Use after free in Messaging in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (CVE-2022-1855)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
http://www.nessus.org/u?ae294315
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-1853
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-1854
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-1855
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-1856
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-1857
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-1858
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-1859
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-1862
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-1863
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-1864
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-1865
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-1867
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-1868
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-1869
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-1870
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-1871
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-1872
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-1873
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-1874
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-1875
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-1876
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26905
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30127
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30128
Solution
Upgrade to Microsoft Edge version 102.0.1245.30 or later.
Risk Factor
Medium
CVSS v3.0 Base Score
9.6 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
8.6 (CVSS:3.0/E:P/RL:O/RC:C)
EPSS Score
0.0028
CVSS v2.0 Base Score
5.1 (CVSS2#AV:N/AC:H/Au:N/C:P/I:P/A:P)
CVSS v2.0 Temporal Score
4.0 (CVSS2#E:POC/RL:OF/RC:C)
References
Plugin Information
Published: 2022/05/31, Modified: 2023/10/26
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 102.0.1245.30
161989 - Microsoft Edge (Chromium) < 102.0.1245.39 Vulnerability
-
Synopsis
The remote host has an web browser installed that is affected by a vulnerability
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 102.0.1245.39. It is, therefore, affected by a vulnerability as referenced in the June 9, 2022 advisory.

- Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability. (CVE-2022-22021)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 102.0.1245.39 or later.
Risk Factor
Medium
CVSS v3.0 Base Score
8.3 (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.2 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0036
CVSS v2.0 Base Score
5.1 (CVSS2#AV:N/AC:H/Au:N/C:P/I:P/A:P)
CVSS v2.0 Temporal Score
3.8 (CVSS2#E:U/RL:OF/RC:C)
References
Plugin Information
Published: 2022/06/09, Modified: 2023/03/23
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 102.0.1245.39
162503 - Microsoft Edge (Chromium) < 103.0.1264.37 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 103.0.1264.37. It is, therefore, affected by multiple vulnerabilities as referenced in the June 23, 2022 advisory.

- Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-30192, CVE-2022-33638. (CVE-2022-33639)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 103.0.1264.37 or later.
Risk Factor
Medium
CVSS v3.0 Base Score
8.3 (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.2 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0043
CVSS v2.0 Base Score
5.1 (CVSS2#AV:N/AC:H/Au:N/C:P/I:P/A:P)
CVSS v2.0 Temporal Score
3.8 (CVSS2#E:U/RL:OF/RC:C)
References
Plugin Information
Published: 2022/06/23, Modified: 2023/03/21
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 103.0.1264.37
162624 - Microsoft Edge (Chromium) < 103.0.1264.44 Vulnerability
-
Synopsis
The remote host has an web browser installed that is affected by a vulnerability
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 103.0.1264.44. It is, therefore, affected by a vulnerability as referenced in the June 30, 2022 advisory.

- Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-30192, CVE-2022-33638, CVE-2022-33639. (CVE-2022-33680)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 103.0.1264.44 or later.
Risk Factor
Medium
CVSS v3.0 Base Score
8.3 (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.2 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0031
CVSS v2.0 Base Score
5.1 (CVSS2#AV:N/AC:H/Au:N/C:P/I:P/A:P)
CVSS v2.0 Temporal Score
3.8 (CVSS2#E:U/RL:OF/RC:C)
References
Plugin Information
Published: 2022/06/30, Modified: 2023/03/23
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 103.0.1264.44
171334 - Microsoft Edge (Chromium) < 109.0.1518.78 Tampering (CVE-2023-21720)
-
Synopsis
The remote host has an web browser installed that is affected by tampering.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 109.0.1518.78. It is, therefore, affected by a vulnerability as referenced in the February 2, 2023 advisory.

- Microsoft Edge (Chromium-based) Tampering Vulnerability (CVE-2023-21720)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 109.0.1518.78 or later.
Risk Factor
Medium
CVSS v3.0 Base Score
5.3 (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H)
CVSS v3.0 Temporal Score
4.6 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0021
CVSS v2.0 Base Score
5.4 (CVSS2#AV:N/AC:H/Au:N/C:N/I:N/A:C)
CVSS v2.0 Temporal Score
4.0 (CVSS2#E:U/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2023-21720
XREF IAVA:2023-A-0071-S
Plugin Information
Published: 2023/02/10, Modified: 2023/02/16
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 109.0.1518.78
174286 - Microsoft Edge (Chromium) < 112.0.1722.34 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 112.0.1722.34. It is, therefore, affected by multiple vulnerabilities as referenced in the April 6, 2023 advisory.

- Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability (CVE-2023-28284)

- Microsoft Edge (Chromium-based) Spoofing Vulnerability (CVE-2023-24935)

- Microsoft Edge (Chromium-based) Tampering Vulnerability (CVE-2023-28301)


Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 112.0.1722.34 or later.
Risk Factor
Medium
CVSS v3.0 Base Score
6.1 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
CVSS v3.0 Temporal Score
5.3 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0457
CVSS v2.0 Base Score
6.4 (CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:N)
CVSS v2.0 Temporal Score
4.7 (CVSS2#E:U/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2023-24935
CVE CVE-2023-28284
CVE CVE-2023-28301
XREF IAVA:2023-A-0180-S
Plugin Information
Published: 2023/04/14, Modified: 2023/05/23
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 112.0.1722.34
211720 - Microsoft Edge (Chromium) < 131.0.2903.63 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 131.0.2903.63. It is, therefore, affected by multiple vulnerabilities as referenced in the November 21, 2024 advisory.

- Type Confusion in V8 in Google Chrome prior to 131.0.6778.85 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2024-11395)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 131.0.2903.63 or later.
Risk Factor
Medium
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.7 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0022
CVSS v2.0 Base Score
6.8 (CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P)
CVSS v2.0 Temporal Score
5.0 (CVSS2#E:U/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2024-11395
CVE CVE-2024-49054
XREF IAVA:2024-A-0753-S
Plugin Information
Published: 2024/11/22, Modified: 2024/12/13
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 131.0.2903.63
212105 - Microsoft Edge (Chromium) < 131.0.2903.86 (CVE-2024-49041)
-
Synopsis
The remote host has an web browser installed that is affected by a vulnerability.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 131.0.2903.86. It is, therefore, affected by a vulnerability as referenced in the December 5, 2024 advisory.

- Microsoft Edge (Chromium-based) Spoofing Vulnerability (CVE-2024-49041)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 131.0.2903.86 or later.
Risk Factor
Medium
CVSS v3.0 Base Score
4.3 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N)
CVSS v3.0 Temporal Score
3.8 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0013
CVSS v2.0 Base Score
5.0 (CVSS2#AV:N/AC:L/Au:N/C:N/I:P/A:N)
CVSS v2.0 Temporal Score
3.7 (CVSS2#E:U/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2024-49041
XREF IAVA:2024-A-0805-S
Plugin Information
Published: 2024/12/06, Modified: 2025/01/24
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 131.0.2903.86
214664 - Microsoft Edge (Chromium) < 132.0.2957.127 (CVE-2025-21262)
-
Synopsis
The remote host has an web browser installed that is affected by a vulnerability.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 132.0.2957.127. It is, therefore, affected by a vulnerability as referenced in the January 24, 2025 advisory.

- Microsoft Edge (Chromium-based) Spoofing Vulnerability (CVE-2025-21262)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 132.0.2957.127 or later.
Risk Factor
Medium
CVSS v3.0 Base Score
5.4 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N)
CVSS v3.0 Temporal Score
4.7 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0008
CVSS v2.0 Base Score
6.4 (CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:N)
CVSS v2.0 Temporal Score
4.7 (CVSS2#E:U/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2025-21262
XREF IAVA:2025-A-0072-S
Plugin Information
Published: 2025/01/27, Modified: 2025/02/14
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 132.0.2957.127
214822 - Microsoft Edge (Chromium) < 132.0.2957.140 (CVE-2025-0762)
-
Synopsis
The remote host has an web browser installed that is affected by a vulnerability.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 132.0.2957.140. It is, therefore, affected by a vulnerability as referenced in the January 30, 2025 advisory.

- Use after free in DevTools in Google Chrome prior to 132.0.6834.159 allowed a remote attacker to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security severity: Medium) (CVE-2025-0762)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 132.0.2957.140 or later.
Risk Factor
Medium
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.7 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0008
CVSS v2.0 Base Score
6.8 (CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P)
CVSS v2.0 Temporal Score
5.0 (CVSS2#E:U/RL:OF/RC:C)
References
Plugin Information
Published: 2025/01/30, Modified: 2025/01/30
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 132.0.2957.140
216623 - Microsoft Edge (Chromium) < 133.0.3065.82 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 133.0.3065.82. It is, therefore, affected by multiple vulnerabilities as referenced in the February 21, 2025 advisory.

- Heap buffer overflow in GPU in Google Chrome on Android prior to 133.0.6943.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2025-1426)

- Heap buffer overflow in V8 in Google Chrome prior to 133.0.6943.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2025-0999)

- Use after free in Network in Google Chrome prior to 133.0.6943.126 allowed a remote attacker to potentially exploit heap corruption via a crafted web app. (Chromium security severity: Medium) (CVE-2025-1006)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 133.0.3065.82 or later.
Risk Factor
Medium
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.7 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0007
CVSS v2.0 Base Score
6.8 (CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P)
CVSS v2.0 Temporal Score
5.0 (CVSS2#E:U/RL:OF/RC:C)
References
Plugin Information
Published: 2025/02/21, Modified: 2025/02/21
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 133.0.3065.82
232301 - Microsoft Edge (Chromium) < 134.0.3124.51 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 134.0.3124.51. It is, therefore, affected by multiple vulnerabilities as referenced in the March 7, 2025 advisory.

- No cwe for this issue in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. (CVE-2025-26643)

- Out of bounds read in V8 in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High) (CVE-2025-1914)

- Improper Limitation of a Pathname to a Restricted Directory in DevTools in Google Chrome on Windows prior to 134.0.6998.35 allowed an attacker who convinced a user to install a malicious extension to bypass file access restrictions via a crafted Chrome Extension. (Chromium security severity: Medium) (CVE-2025-1915)

- Use after free in Profiles in Google Chrome prior to 134.0.6998.35 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.
(Chromium security severity: Medium) (CVE-2025-1916)

- Inappropriate implementation in Browser UI in Google Chrome on Android prior to 134.0.6998.35 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) (CVE-2025-1917)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 134.0.3124.51 or later.
Risk Factor
Medium
CVSS v3.0 Base Score
5.4 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N)
CVSS v3.0 Temporal Score
4.7 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0007
CVSS v2.0 Base Score
6.4 (CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:N)
CVSS v2.0 Temporal Score
4.7 (CVSS2#E:U/RL:OF/RC:C)
STIG Severity
I
References
Plugin Information
Published: 2025/03/07, Modified: 2025/03/28
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 134.0.3124.51
232658 - Microsoft Edge (Chromium) < 134.0.3124.66 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 134.0.3124.66. It is, therefore, affected by multiple vulnerabilities as referenced in the March 12, 2025 advisory.

- Out of bounds read in V8 in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Medium) (CVE-2025-2137)

- Use after free in Inspector in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) (CVE-2025-2136)

- Type Confusion in V8 in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2025-1920, CVE-2025-2135)

- An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in visionOS 2.3.2, iOS 18.3.2 and iPadOS 18.3.2, macOS Sequoia 15.3.2, Safari 18.3.1.
Maliciously crafted web content May be able to break out of Web Content sandbox. This is a supplementary fix for an attack that was blocked in iOS 17.2. (Apple is aware of a report that this issue May have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 17.2.). (CVE-2025-24201)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 134.0.3124.66 or later.
Risk Factor
Medium
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
8.2 (CVSS:3.0/E:F/RL:O/RC:C)
EPSS Score
0.0021
CVSS v2.0 Base Score
6.8 (CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P)
CVSS v2.0 Temporal Score
5.6 (CVSS2#E:F/RL:OF/RC:C)
References
CVE CVE-2025-1920
CVE CVE-2025-2135
CVE CVE-2025-2136
CVE CVE-2025-2137
CVE CVE-2025-24201
XREF CISA-KNOWN-EXPLOITED:2025/04/03
Plugin Information
Published: 2025/03/12, Modified: 2025/03/13
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 134.0.3124.66
233201 - Microsoft Edge (Chromium) < 134.0.3124.83 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 134.0.3124.83. It is, therefore, affected by multiple vulnerabilities as referenced in the March 21, 2025 advisory.

- CVE-2025-2476 is a use after free in Lens. It was reported by SungKwon Lee of Enki Whitehat on 2025-03-05.
(CVE-2025-2476)

- Use after free in Lens in Google Chrome prior to 134.0.6998.117 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical) (CVE-2025-2476)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 134.0.3124.83 or later.
Risk Factor
Medium
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.7 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0046
CVSS v2.0 Base Score
6.8 (CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P)
CVSS v2.0 Temporal Score
5.0 (CVSS2#E:U/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2025-2476
CVE CVE-2025-29795
XREF IAVA:2025-A-0194-S
Plugin Information
Published: 2025/03/21, Modified: 2025/04/10
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 134.0.3124.83
233369 - Microsoft Edge (Chromium) < 134.0.3124.93 (CVE-2025-2783)
-
Synopsis
The remote host has an web browser installed that is affected by a vulnerability.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 134.0.3124.93. It is, therefore, affected by a vulnerability as referenced in the March 26, 2025 advisory.

- Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allowed a remote attacker to perform a sandbox escape via a malicious file. (Chromium security severity: High) (CVE-2025-2783)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 134.0.3124.93 or later.
Risk Factor
Medium
CVSS v3.0 Base Score
8.3 (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.7 (CVSS:3.0/E:F/RL:O/RC:C)
EPSS Score
0.381
CVSS v2.0 Base Score
6.8 (CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P)
CVSS v2.0 Temporal Score
5.6 (CVSS2#E:F/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2025-2783
XREF CISA-KNOWN-EXPLOITED:2025/04/17
XREF IAVA:2025-A-0194-S
Plugin Information
Published: 2025/03/26, Modified: 2025/04/10
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 134.0.3124.93
236813 - Microsoft Edge (Chromium) < 136.0.3240.76 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 136.0.3240.76. It is, therefore, affected by multiple vulnerabilities as referenced in the May 15, 2025 advisory.

- Chromium/Google Chrome is vulnerable to insufficient policy enforcement in Loader. A proof-of-concept for this vulnerability was posted to X on May 5. (CVE-2025-4664)

- Insufficient policy enforcement in Loader in Google Chrome prior to 136.0.7103.113 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High) (CVE-2025-4664)

- Chromium/Google Chrome is vulnerable to an incorrect handle provided in unspecified circumstances in Mojo.
(CVE-2025-4609)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 136.0.3240.76 or later.
Risk Factor
Medium
CVSS v3.0 Base Score
4.3 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N)
CVSS v3.0 Temporal Score
4.0 (CVSS:3.0/E:F/RL:O/RC:C)
EPSS Score
0.0014
CVSS v2.0 Base Score
5.0 (CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N)
CVSS v2.0 Temporal Score
4.1 (CVSS2#E:F/RL:OF/RC:C)
References
Plugin Information
Published: 2025/05/16, Modified: 2025/10/29
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 136.0.3240.76
240698 - Microsoft Edge (Chromium) < 138.0.3351.55 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 138.0.3351.55. It is, therefore, affected by multiple vulnerabilities as referenced in the June 26, 2025 advisory.

- Insufficient data validation in DevTools in Google Chrome on Windows prior to 138.0.7204.49 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. (Chromium security severity: Low) (CVE-2025-6557)

- Use after free in Animation in Google Chrome prior to 138.0.7204.49 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) (CVE-2025-6555)

- Insufficient policy enforcement in Loader in Google Chrome prior to 138.0.7204.49 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Low) (CVE-2025-6556)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 138.0.3351.55 or later.
Risk Factor
Medium
CVSS v3.0 Base Score
5.4 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N)
CVSS v3.0 Temporal Score
4.7 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0009
CVSS v2.0 Base Score
6.4 (CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:N)
CVSS v2.0 Temporal Score
4.7 (CVSS2#E:U/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2025-6555
CVE CVE-2025-6556
CVE CVE-2025-6557
CVE CVE-2025-47182
CVE CVE-2025-47963
CVE CVE-2025-47964
XREF IAVA:2025-A-0461-S
Plugin Information
Published: 2025/06/26, Modified: 2025/10/29
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 138.0.3351.55
264543 - Microsoft Edge (Chromium) < 140.0.3485.54 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 140.0.3485.54. It is, therefore, affected by multiple vulnerabilities as referenced in the September 5, 2025 advisory.

- Improper access control in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network. (CVE-2025-53791)

- Use after free in V8 in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2025-9864)

- Inappropriate implementation in Toolbar in Google Chrome on Android prior to 140.0.7339.80 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform domain spoofing via a crafted HTML page. (Chromium security severity: Medium) (CVE-2025-9865)

- Inappropriate implementation in Extensions in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Medium) (CVE-2025-9866)

- Inappropriate implementation in Downloads in Google Chrome on Android prior to 140.0.7339.80 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) (CVE-2025-9867)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 140.0.3485.54 or later.
Risk Factor
Medium
CVSS v3.0 Base Score
4.7 (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N)
CVSS v3.0 Temporal Score
4.1 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0005
CVSS v2.0 Base Score
4.0 (CVSS2#AV:N/AC:H/Au:N/C:P/I:P/A:N)
CVSS v2.0 Temporal Score
3.0 (CVSS2#E:U/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2025-9864
CVE CVE-2025-9865
CVE CVE-2025-9866
CVE CVE-2025-9867
CVE CVE-2025-53791
XREF IAVA:2025-A-0663-S
Plugin Information
Published: 2025/09/11, Modified: 2025/10/29
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 140.0.3485.54
266422 - Microsoft Edge (Chromium) < 141.0.3537.57 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 141.0.3537.57. It is, therefore, affected by multiple vulnerabilities as referenced in the October 2, 2025 advisory.

- Side-channel information leakage in Storage. (CVE-2025-11207)

- Heap buffer overflow in WebGPU. (CVE-2025-11205)

- Heap buffer overflow in Video. (CVE-2025-11206)

- Inappropriate implementation in Media. (CVE-2025-11208, CVE-2025-11212)

- Inappropriate implementation in Omnibox. (CVE-2025-11209, CVE-2025-11213)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 141.0.3537.57 or later.
Risk Factor
Medium
CVSS v3.0 Base Score
7.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
CVSS v3.0 Temporal Score
6.5 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0005
CVSS v2.0 Base Score
5.0 (CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N)
CVSS v2.0 Temporal Score
3.7 (CVSS2#E:U/RL:OF/RC:C)
References
Plugin Information
Published: 2025/10/02, Modified: 2025/10/02
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 141.0.3537.57
274366 - Microsoft Edge (Chromium) < 142.0.3595.65 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 142.0.3595.65. It is, therefore, affected by multiple vulnerabilities as referenced in the November 6, 2025 advisory.

- Inappropriate implementation in Views in Google Chrome on Windows prior to 142.0.7444.137 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted HTML page.
(Chromium security severity: High) (CVE-2025-12726)

- Out of bounds read in WebGPU in Google Chrome on Android prior to 142.0.7444.137 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High) (CVE-2025-12725)

- Inappropriate implementation in V8 in Google Chrome prior to 142.0.7444.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2025-12727)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 142.0.3595.65 or later.
Risk Factor
Medium
CVSS v3.0 Base Score
7.5 (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
6.5 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0007
CVSS v2.0 Base Score
6.8 (CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P)
CVSS v2.0 Temporal Score
5.0 (CVSS2#E:U/RL:OF/RC:C)
References
Plugin Information
Published: 2025/11/07, Modified: 2025/11/10
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 142.0.3595.65
274628 - Microsoft Edge (Chromium) < 142.0.3595.66 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 142.0.3595.66. It is, therefore, affected by multiple vulnerabilities as referenced in the November 6, 2025 advisory.

- Out of bounds read in WebGPU in Google Chrome on Android prior to 142.0.7444.137 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High) (CVE-2025-12725)

- Inappropriate implementation in V8 in Google Chrome prior to 142.0.7444.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2025-12727)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 142.0.3595.66 or later.
Risk Factor
Medium
CVSS v3.0 Base Score
4.3 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N)
CVSS v3.0 Temporal Score
3.8 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0003
CVSS v2.0 Base Score
6.8 (CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P)
CVSS v2.0 Temporal Score
5.0 (CVSS2#E:U/RL:OF/RC:C)
References
Plugin Information
Published: 2025/11/10, Modified: 2025/11/10
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 142.0.3595.66
278386 - Microsoft Edge (Chromium) < 143.0.3650.80 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 143.0.3650.80. It is, therefore, affected by multiple vulnerabilities as referenced in the December 11, 2025 advisory.

- Use after free in Password Manager in Google Chrome prior to 143.0.7499.110 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium) (CVE-2025-14372)

- Inappropriate implementation in Toolbar in Google Chrome on Android prior to 143.0.7499.110 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chromium security severity: Medium) (CVE-2025-14373)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 143.0.3650.80 or later.
Risk Factor
Medium
CVSS v3.0 Base Score
6.1 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
CVSS v3.0 Temporal Score
5.3 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0003
CVSS v2.0 Base Score
6.4 (CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:N)
CVSS v2.0 Temporal Score
4.7 (CVSS2#E:U/RL:OF/RC:C)
References
CVE CVE-2025-14372
CVE CVE-2025-14373
XREF CISA-KNOWN-EXPLOITED:2026/01/02
Plugin Information
Published: 2025/12/11, Modified: 2025/12/22
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 143.0.3650.80
152685 - Microsoft Edge (Chromium) < 92.0.902.78 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 92.0.902.78. It is, therefore, affected by multiple vulnerabilities as referenced in the August 19, 2021 advisory.

- Use after free in ANGLE in Google Chrome prior to 92.0.4515.159 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (CVE-2021-30604)

- Type confusion in V8 in Google Chrome prior to 92.0.4515.159 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (CVE-2021-30598, CVE-2021-30599)

- Use after free in Extensions API in Google Chrome prior to 92.0.4515.159 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.
(CVE-2021-30601)

- Use after free in WebRTC in Google Chrome prior to 92.0.4515.159 allowed an attacker who convinced a user to visit a malicious website to potentially exploit heap corruption via a crafted HTML page.
(CVE-2021-30602)

- Data race in WebAudio in Google Chrome prior to 92.0.4515.159 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (CVE-2021-30603)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 92.0.902.78 or later.
Risk Factor
Medium
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.9 (CVSS:3.0/E:P/RL:O/RC:C)
EPSS Score
0.0312
CVSS v2.0 Base Score
6.8 (CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P)
CVSS v2.0 Temporal Score
5.3 (CVSS2#E:POC/RL:OF/RC:C)
References
Plugin Information
Published: 2021/08/19, Modified: 2021/09/24
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 92.0.902.78
155601 - Microsoft Edge (Chromium) < 93.0.961.38 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 93.0.961.38. It is, therefore, affected by multiple vulnerabilities as referenced in the September 2, 2021 advisory.

- Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-36930. (CVE-2021-26436)

- Microsoft Edge for Android Information Disclosure Vulnerability (CVE-2021-26439)

- Chromium: CVE-2021-30606 Use after free in Blink (CVE-2021-30606)

- Chromium: CVE-2021-30607 Use after free in Permissions (CVE-2021-30607)

- Chromium: CVE-2021-30608 Use after free in Web Share (CVE-2021-30608)

- Chromium: CVE-2021-30609 Use after free in Sign-In (CVE-2021-30609)

- Chromium: CVE-2021-30610 Use after free in Extensions API (CVE-2021-30610)

- Chromium: CVE-2021-30611 Use after free in WebRTC (CVE-2021-30611)

- Chromium: CVE-2021-30612 Use after free in WebRTC (CVE-2021-30612)

- Chromium: CVE-2021-30613 Use after free in Base internals (CVE-2021-30613)

- Chromium: CVE-2021-30614 Heap buffer overflow in TabStrip (CVE-2021-30614)

- Chromium: CVE-2021-30615 Cross-origin data leak in Navigation (CVE-2021-30615)

- Chromium: CVE-2021-30616 Use after free in Media (CVE-2021-30616)

- Chromium: CVE-2021-30617 Policy bypass in Blink (CVE-2021-30617)

- Chromium: CVE-2021-30618 Inappropriate implementation in DevTools (CVE-2021-30618)

- Chromium: CVE-2021-30619 UI Spoofing in Autofill (CVE-2021-30619)

- Chromium: CVE-2021-30620 Insufficient policy enforcement in Blink (CVE-2021-30620)

- Chromium: CVE-2021-30621 UI Spoofing in Autofill (CVE-2021-30621)

- Chromium: CVE-2021-30622 Use after free in WebApp Installs (CVE-2021-30622)

- Chromium: CVE-2021-30623 Use after free in Bookmarks (CVE-2021-30623)

- Chromium: CVE-2021-30624 Use after free in Autofill (CVE-2021-30624)

- Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-26436. (CVE-2021-36930)

- Microsoft Edge for Android Spoofing Vulnerability (CVE-2021-38641)

- Microsoft Edge for iOS Spoofing Vulnerability (CVE-2021-38642)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
See Also
http://www.nessus.org/u?eab98635
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26436
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26439
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-30606
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-30607
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-30608
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-30609
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-30610
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-30611
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-30612
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-30613
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-30614
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-30615
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-30616
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-30617
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-30618
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-30619
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-30620
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-30621
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-30622
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-30623
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-30624
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-36930
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-38641
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-38642
Solution
Upgrade to Microsoft Edge version 93.0.961.38 or later.
Risk Factor
Medium
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.7 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0625
CVSS v2.0 Base Score
6.8 (CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P)
CVSS v2.0 Temporal Score
5.0 (CVSS2#E:U/RL:OF/RC:C)
STIG Severity
I
References
Plugin Information
Published: 2021/11/18, Modified: 2022/05/06
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 93.0.961.38
153369 - Microsoft Edge (Chromium) < 93.0.961.47 Vulnerability
-
Synopsis
The remote host has an web browser installed that is affected by a vulnerability
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 93.0.961.47. It is, therefore, affected by a vulnerability as referenced in the September 14, 2021 advisory.

- Out of bounds write in V8 in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (CVE-2021-30632)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 93.0.4577.82 or later.
Risk Factor
Medium
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
8.4 (CVSS:3.0/E:H/RL:O/RC:C)
EPSS Score
0.8323
CVSS v2.0 Base Score
6.8 (CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P)
CVSS v2.0 Temporal Score
5.9 (CVSS2#E:H/RL:OF/RC:C)
References
CVE CVE-2021-30632
XREF CISA-KNOWN-EXPLOITED:2021/11/17
Plugin Information
Published: 2021/09/14, Modified: 2021/11/30
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 93.0.961.47
153450 - Microsoft Edge (Chromium) < 93.0.961.52 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 93.0.961.52. It is, therefore, affected by multiple vulnerabilities as referenced in the September 16, 2021 advisory.

- Use after free in Indexed DB API in Google Chrome prior to 93.0.4577.82 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
(CVE-2021-30633)

- Use after free in Selection API in Google Chrome prior to 93.0.4577.82 allowed a remote attacker who convinced the user the visit a malicious website to potentially exploit heap corruption via a crafted HTML page. (CVE-2021-30625)

- Out of bounds memory access in ANGLE in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (CVE-2021-30626)

- Type confusion in Blink layout in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (CVE-2021-30627)

- Stack buffer overflow in ANGLE in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit stack corruption via a crafted HTML page. (CVE-2021-30628)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 93.0.961.52 or later.
Risk Factor
Medium
CVSS v3.0 Base Score
9.6 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
8.9 (CVSS:3.0/E:F/RL:O/RC:C)
EPSS Score
0.3816
CVSS v2.0 Base Score
6.8 (CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P)
CVSS v2.0 Temporal Score
5.6 (CVSS2#E:F/RL:OF/RC:C)
References
CVE CVE-2021-30625
CVE CVE-2021-30626
CVE CVE-2021-30627
CVE CVE-2021-30628
CVE CVE-2021-30629
CVE CVE-2021-30630
CVE CVE-2021-30633
XREF CISA-KNOWN-EXPLOITED:2021/11/17
Plugin Information
Published: 2021/09/17, Modified: 2024/01/16
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 93.0.961.52
153666 - Microsoft Edge (Chromium) < 94.0.992.31 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 94.0.992.31. It is, therefore, affected by multiple vulnerabilities as referenced in the September 24, 2021 advisory.

- Use after free in Portals in Google Chrome prior to 94.0.4606.61 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
(CVE-2021-37973)

- Use after free in Offline use in Google Chrome on Android prior to 94.0.4606.54 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.
(CVE-2021-37956)

- Use after free in WebGPU in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (CVE-2021-37957)

- Inappropriate implementation in Navigation in Google Chrome on Windows prior to 94.0.4606.54 allowed a remote attacker to inject scripts or HTML into a privileged page via a crafted HTML page. (CVE-2021-37958)

- Use after free in Task Manager in Google Chrome prior to 94.0.4606.54 allowed an attacker who convinced a user to enage in a series of user gestures to potentially exploit heap corruption via a crafted HTML page.
(CVE-2021-37959)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 94.0.992.31 or later.
Risk Factor
Medium
CVSS v3.0 Base Score
9.6 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
8.9 (CVSS:3.0/E:F/RL:O/RC:C)
EPSS Score
0.1564
CVSS v2.0 Base Score
6.8 (CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P)
CVSS v2.0 Temporal Score
5.6 (CVSS2#E:F/RL:OF/RC:C)
STIG Severity
I
References
Plugin Information
Published: 2021/09/24, Modified: 2024/01/16
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 94.0.992.31
153839 - Microsoft Edge (Chromium) < 94.0.992.38 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 94.0.992.38. It is, therefore, affected by multiple vulnerabilities as referenced in the October 1, 2021 advisory.

- Use after free in V8 in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (CVE-2021-37975)

- Use after free in Safebrowsing in Google Chrome prior to 94.0.4606.71 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.
(CVE-2021-37974)

- Inappropriate implementation in Memory in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (CVE-2021-37976)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 94.0.992.38 or later.
Risk Factor
Medium
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
8.2 (CVSS:3.0/E:F/RL:O/RC:C)
EPSS Score
0.6295
CVSS v2.0 Base Score
6.8 (CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P)
CVSS v2.0 Temporal Score
5.6 (CVSS2#E:F/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2021-37974
CVE CVE-2021-37975
CVE CVE-2021-37976
XREF IAVA:2021-A-0449-S
XREF CISA-KNOWN-EXPLOITED:2021/11/17
Plugin Information
Published: 2021/10/01, Modified: 2023/04/25
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 94.0.992.38
153995 - Microsoft Edge (Chromium) < 94.0.992.47 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 94.0.992.47. It is, therefore, affected by multiple vulnerabilities as referenced in the October 11, 2021 advisory.

- heap buffer overflow in WebRTC in Google Chrome prior to 94.0.4606.81 allowed a remote attacker who convinced a user to browse to a malicious website to potentially exploit heap corruption via a crafted HTML page. (CVE-2021-37979)

- Use after free in Garbage Collection in Google Chrome prior to 94.0.4606.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (CVE-2021-37977)

- Heap buffer overflow in Blink in Google Chrome prior to 94.0.4606.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (CVE-2021-37978)

- Inappropriate implementation in Sandbox in Google Chrome prior to 94.0.4606.81 allowed a remote attacker to potentially bypass site isolation via Windows. (CVE-2021-37980)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 94.0.992.47 or later.
Risk Factor
Medium
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.9 (CVSS:3.0/E:P/RL:O/RC:C)
EPSS Score
0.0103
CVSS v2.0 Base Score
6.8 (CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P)
CVSS v2.0 Temporal Score
5.3 (CVSS2#E:POC/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2021-37977
CVE CVE-2021-37978
CVE CVE-2021-37979
CVE CVE-2021-37980
XREF IAVA:2021-A-0459-S
Plugin Information
Published: 2021/10/11, Modified: 2023/11/28
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 94.0.992.47
154327 - Microsoft Edge (Chromium) < 95.0.1020.30 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 95.0.1020.30. It is, therefore, affected by multiple vulnerabilities as referenced in the October 21, 2021 advisory.

- Use after free in PDF Accessibility in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (CVE-2021-37993)

- Heap buffer overflow in Skia in Google Chrome prior to 95.0.4638.54 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
(CVE-2021-37981)

- Use after free in Incognito in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (CVE-2021-37982)

- Use after free in Dev Tools in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (CVE-2021-37983)

- Heap buffer overflow in PDFium in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (CVE-2021-37984)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 95.0.1020.30 or later.
Risk Factor
Medium
CVSS v3.0 Base Score
9.6 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
8.3 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0273
CVSS v2.0 Base Score
6.8 (CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P)
CVSS v2.0 Temporal Score
5.0 (CVSS2#E:U/RL:OF/RC:C)
STIG Severity
I
References
Plugin Information
Published: 2021/10/21, Modified: 2023/10/06
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 95.0.1020.30
154738 - Microsoft Edge (Chromium) < 95.0.1020.40 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 95.0.1020.40. It is, therefore, affected by multiple vulnerabilities as referenced in the October 29, 2021 advisory.

- Inappropriate implementation in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (CVE-2021-38003)

- Use after free in Sign-In in Google Chrome prior to 95.0.4638.69 allowed a remote attacker who convinced a user to sign into Chrome to potentially exploit heap corruption via a crafted HTML page. (CVE-2021-37997)

- Use after free in Garbage Collection in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (CVE-2021-37998)

- Insufficient data validation in New Tab Page in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to inject arbitrary scripts or HTML in a new browser tab via a crafted HTML page.
(CVE-2021-37999)

- Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 95.0.4638.69 allowed a remote attacker to arbitrarily browser to a malicious URL via a crafted HTML page.
(CVE-2021-38000)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 95.0.1020.40 or later.
Risk Factor
Medium
CVSS v3.0 Base Score
9.6 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
8.9 (CVSS:3.0/E:F/RL:O/RC:C)
EPSS Score
0.748
CVSS v2.0 Base Score
6.8 (CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P)
CVSS v2.0 Temporal Score
5.6 (CVSS2#E:F/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2021-37997
CVE CVE-2021-37998
CVE CVE-2021-37999
CVE CVE-2021-38000
CVE CVE-2021-38001
CVE CVE-2021-38002
CVE CVE-2021-38003
XREF IAVA:2021-A-0522-S
XREF CISA-KNOWN-EXPLOITED:2021/11/17
Plugin Information
Published: 2021/10/29, Modified: 2023/04/25
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 95.0.1020.40
155653 - Microsoft Edge (Chromium) < 96.0.1052.29 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 96.0.1052.29. It is, therefore, affected by multiple vulnerabilities as referenced in the November 19, 2021 advisory.

- Insufficient policy enforcement in iframe sandbox in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (CVE-2021-38017)

- Use after free in loader in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (CVE-2021-38005)

- Use after free in storage foundation in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (CVE-2021-38006, CVE-2021-38011)

- Type confusion in V8 in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (CVE-2021-38007, CVE-2021-38012)

- Use after free in media in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (CVE-2021-38008)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 96.0.1052.29 or later.
Risk Factor
Medium
CVSS v3.0 Base Score
9.6 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
8.6 (CVSS:3.0/E:P/RL:O/RC:C)
EPSS Score
0.0104
CVSS v2.0 Base Score
6.8 (CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P)
CVSS v2.0 Temporal Score
5.3 (CVSS2#E:POC/RL:OF/RC:C)
STIG Severity
I
References
Plugin Information
Published: 2021/11/20, Modified: 2023/10/06
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 96.0.1052.29
171335 - Microsoft Edge (Chromium) < 96.0.1054.29 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 96.0.1054.29. It is, therefore, affected by multiple vulnerabilities as referenced in the November 19, 2021 advisory.

- Use after free in loader in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (CVE-2021-38005)

- Use after free in storage foundation in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (CVE-2021-38006, CVE-2021-38011)

- Type confusion in V8 in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (CVE-2021-38007, CVE-2021-38012)

- Use after free in media in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (CVE-2021-38008)

- Inappropriate implementation in cache in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (CVE-2021-38009)

- Inappropriate implementation in service workers in Google Chrome prior to 96.0.4664.45 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.
(CVE-2021-38010)

- Heap buffer overflow in fingerprint recognition in Google Chrome on ChromeOS prior to 96.0.4664.45 allowed a remote attacker who had compromised a WebUI renderer process to potentially perform a sandbox escape via a crafted HTML page. (CVE-2021-38013)

- Out of bounds write in Swiftshader in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (CVE-2021-38014)

- Inappropriate implementation in input in Google Chrome prior to 96.0.4664.45 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension. (CVE-2021-38015)

- Insufficient policy enforcement in background fetch in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (CVE-2021-38016)

- Insufficient policy enforcement in iframe sandbox in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (CVE-2021-38017)

- Inappropriate implementation in navigation in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (CVE-2021-38018)

- Insufficient policy enforcement in CORS in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (CVE-2021-38019)

- Insufficient policy enforcement in contacts picker in Google Chrome on Android prior to 96.0.4664.45 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
(CVE-2021-38020)

- Inappropriate implementation in referrer in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (CVE-2021-38021)

- Inappropriate implementation in WebAuthentication in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (CVE-2021-38022)

- Microsoft Edge (Chromium-based) Spoofing Vulnerability (CVE-2021-42308)

- Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability (CVE-2021-43221)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 96.0.1054.29 or later.
Risk Factor
Medium
CVSS v3.0 Base Score
9.6 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
8.6 (CVSS:3.0/E:P/RL:O/RC:C)
EPSS Score
0.0143
CVSS v2.0 Base Score
6.8 (CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P)
CVSS v2.0 Temporal Score
5.3 (CVSS2#E:POC/RL:OF/RC:C)
STIG Severity
I
References
Plugin Information
Published: 2023/02/10, Modified: 2023/10/06
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 96.0.1054.29
156011 - Microsoft Edge (Chromium) < 96.0.1054.53 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 96.0.1054.53. It is, therefore, affected by multiple vulnerabilities as referenced in the December 10, 2021 advisory.

- Use after free in window manager in Google Chrome on ChromeOS prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (CVE-2021-4067)

- Use after free in web apps in Google Chrome prior to 96.0.4664.93 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension.
(CVE-2021-4052)

- Use after free in UI in Google Chrome on Linux prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (CVE-2021-4053)

- Incorrect security UI in autofill in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (CVE-2021-4054)

- Heap buffer overflow in extensions in Google Chrome prior to 96.0.4664.93 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. (CVE-2021-4055)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 96.0.1054.53 or later.
Risk Factor
Medium
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
7.9 (CVSS:3.0/E:P/RL:O/RC:C)
EPSS Score
0.0257
CVSS v2.0 Base Score
6.8 (CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P)
CVSS v2.0 Temporal Score
5.3 (CVSS2#E:POC/RL:OF/RC:C)
References
Plugin Information
Published: 2021/12/11, Modified: 2022/01/11
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 96.0.1054.53
156077 - Microsoft Edge (Chromium) < 96.0.1054.57 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 96.0.1054.57. It is, therefore, affected by multiple vulnerabilities as referenced in the December 14, 2021 advisory.

- Use after free in V8 in Google Chrome prior to 96.0.4664.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (CVE-2021-4102)

- Insufficient data validation in Mojo in Google Chrome prior to 96.0.4664.110 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
(CVE-2021-4098)

- Use after free in Swiftshader in Google Chrome prior to 96.0.4664.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (CVE-2021-4099)

- Object lifecycle issue in ANGLE in Google Chrome prior to 96.0.4664.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (CVE-2021-4100)

- Heap buffer overflow in Swiftshader in Google Chrome prior to 96.0.4664.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (CVE-2021-4101)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 96.0.1054.57 or later.
Risk Factor
Medium
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
8.2 (CVSS:3.0/E:F/RL:O/RC:C)
EPSS Score
0.0386
CVSS v2.0 Base Score
6.8 (CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P)
CVSS v2.0 Temporal Score
5.6 (CVSS2#E:F/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2021-4098
CVE CVE-2021-4099
CVE CVE-2021-4100
CVE CVE-2021-4101
CVE CVE-2021-4102
XREF CISA-KNOWN-EXPLOITED:2021/12/29
XREF IAVA:2021-A-0576-S
Plugin Information
Published: 2021/12/14, Modified: 2023/04/25
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 96.0.1054.57
156916 - Microsoft Edge (Chromium) < 97.0.1072.69 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 97.0.1072.69. It is, therefore, affected by multiple vulnerabilities as referenced in the January 20, 2022 advisory.

- Microsoft Edge for Android Spoofing Vulnerability. (CVE-2022-23258)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
See Also
http://www.nessus.org/u?4c365598
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-0289
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-0290
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-0291
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-0292
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-0293
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-0294
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-0295
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-0296
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-0297
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-0298
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-0300
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-0301
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-0302
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-0303
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-0304
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-0305
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-0306
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-0307
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-0308
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-0309
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-0310
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-0311
Solution
Upgrade to Microsoft Edge version 97.0.1072.69 or later.
Risk Factor
Medium
CVSS v3.0 Base Score
4.3 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N)
CVSS v3.0 Temporal Score
3.8 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0094
CVSS v2.0 Base Score
4.3 (CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N)
CVSS v2.0 Temporal Score
3.2 (CVSS2#E:U/RL:OF/RC:C)
References
Plugin Information
Published: 2022/01/20, Modified: 2022/05/06
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 97.0.1072.69
157369 - Microsoft Edge (Chromium) < 98.0.1108.43 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 98.0.1108.43. It is, therefore, affected by multiple vulnerabilities as referenced in the February 3, 2022 advisory.

- Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-23262. (CVE-2022-23263)

- Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-23263. (CVE-2022-23262)

- Microsoft Edge (Chromium-based) Tampering Vulnerability. (CVE-2022-23261)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 98.0.1108.43 or later.
Risk Factor
Medium
CVSS v3.0 Base Score
7.7 (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
6.7 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.018
CVSS v2.0 Base Score
6.8 (CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P)
CVSS v2.0 Temporal Score
5.0 (CVSS2#E:U/RL:OF/RC:C)
References
Plugin Information
Published: 2022/02/03, Modified: 2022/05/06
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 98.0.1108.43
157881 - Microsoft Edge (Chromium) < 98.0.1108.50 Vulnerability
-
Synopsis
The remote host has an web browser installed that is affected by a vulnerability
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 98.0.1108.50. It is, therefore, affected by a vulnerability as referenced in the February 10, 2022 advisory.

- Microsoft Edge (Chromium-based) Spoofing Vulnerability (CVE-2022-23264)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 98.0.1108.50 or later.
Risk Factor
Medium
CVSS v3.0 Base Score
4.7 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N)
CVSS v3.0 Temporal Score
4.1 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0019
CVSS v2.0 Base Score
5.0 (CVSS2#AV:N/AC:L/Au:N/C:N/I:P/A:N)
CVSS v2.0 Temporal Score
3.7 (CVSS2#E:U/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2022-23264
XREF IAVA:2023-A-0071-S
Plugin Information
Published: 2022/02/10, Modified: 2023/11/09
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 98.0.1108.50
158097 - Microsoft Edge (Chromium) < 98.0.1108.55 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 98.0.1108.55. It is, therefore, affected by multiple vulnerabilities as referenced in the February 16, 2022 advisory.

- Inappropriate implementation in Gamepad API in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (CVE-2022-0610)

- Use after free in File Manager in Google Chrome on Chrome OS prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (CVE-2022-0603)

- Heap buffer overflow in Tab Groups in Google Chrome prior to 98.0.4758.102 allowed an attacker who convinced a user to install a malicious extension and engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page. (CVE-2022-0604)

- Use after free in Webstore API in Google Chrome prior to 98.0.4758.102 allowed an attacker who convinced a user to install a malicious extension and convinced a user to enage in specific user interaction to potentially exploit heap corruption via a crafted HTML page. (CVE-2022-0605)

- Use after free in ANGLE in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (CVE-2022-0606)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 98.0.1108.55 or later.
Risk Factor
Medium
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
8.4 (CVSS:3.0/E:H/RL:O/RC:C)
EPSS Score
0.4148
CVSS v2.0 Base Score
6.8 (CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P)
CVSS v2.0 Temporal Score
5.9 (CVSS2#E:H/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2022-0603
CVE CVE-2022-0604
CVE CVE-2022-0605
CVE CVE-2022-0606
CVE CVE-2022-0607
CVE CVE-2022-0608
CVE CVE-2022-0609
CVE CVE-2022-0610
XREF CISA-KNOWN-EXPLOITED:2022/03/01
XREF IAVA:2022-A-0086-S
Plugin Information
Published: 2022/02/16, Modified: 2022/05/03
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 98.0.1108.55
158583 - Microsoft Edge (Chromium) < 99.0.1150.30 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 99.0.1150.30. It is, therefore, affected by multiple vulnerabilities as referenced in the March 3, 2022 advisory.

- Use after free in Chrome OS Shell in Google Chrome on Chrome OS prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in a series of user interaction to potentially exploit heap corruption via user interactions. (CVE-2022-0808)

- Heap buffer overflow in ANGLE in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (CVE-2022-0789)

- Use after free in Cast UI in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially perform a sandbox escape via a crafted HTML page. (CVE-2022-0790)

- Use after free in Omnibox in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via user interactions.
(CVE-2022-0791)

- Out of bounds read in ANGLE in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (CVE-2022-0792)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 99.0.1150.30 or later.
Risk Factor
Medium
CVSS v3.0 Base Score
9.6 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
8.6 (CVSS:3.0/E:P/RL:O/RC:C)
EPSS Score
0.0074
CVSS v2.0 Base Score
6.8 (CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P)
CVSS v2.0 Temporal Score
5.3 (CVSS2#E:POC/RL:OF/RC:C)
STIG Severity
I
References
Plugin Information
Published: 2022/03/03, Modified: 2023/01/10
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 99.0.1150.30
57608 - SMB Signing not required
-
Synopsis
Signing is not required on the remote SMB server.
Description
Signing is not required on the remote SMB server. An unauthenticated, remote attacker can exploit this to conduct man-in-the-middle attacks against the SMB server.
See Also
Solution
Enforce message signing in the host's configuration. On Windows, this is found in the policy setting 'Microsoft network server: Digitally sign communications (always)'. On Samba, the setting is called 'server signing'. See the 'see also' links for further details.
Risk Factor
Medium
CVSS v3.0 Base Score
5.3 (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
CVSS v3.0 Temporal Score
4.6 (CVSS:3.0/E:U/RL:O/RC:C)
CVSS v2.0 Base Score
5.0 (CVSS2#AV:N/AC:L/Au:N/C:N/I:P/A:N)
CVSS v2.0 Temporal Score
3.7 (CVSS2#E:U/RL:OF/RC:C)
Plugin Information
Published: 2012/01/19, Modified: 2022/10/05
Plugin Output

tcp/445/cifs

146332 - Security Update for Forefront Endpoint Protection (February 2021)
-
Synopsis
An antimalware application installed on the remote host is affected by a privilege escalation vulnerability.
Description
The Malware Protection Engine version of Forefront Endpoint Protection installed on the remote Windows host is equal or prior to 1.1.17700.4. It is, therefore, affected by a unspecified privilege escalation vulnerability. An authenticated, local attacker can exploit this to gain administrator access to the system.
See Also
Solution
Enable automatic updates to update the malware engine for the relevant antimalware applications. Refer to Knowledge Base Article 2510781 for information on how to verify that MMPE has been updated.
Risk Factor
Medium
CVSS v3.0 Base Score
7.8 (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
6.8 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.006
CVSS v2.0 Base Score
4.6 (CVSS2#AV:L/AC:L/Au:N/C:P/I:P/A:P)
CVSS v2.0 Temporal Score
3.4 (CVSS2#E:U/RL:OF/RC:C)
References
Plugin Information
Published: 2021/02/09, Modified: 2021/03/05
Plugin Output

tcp/445/cifs


Path : C:\Program Files\Windows Defender\
Installed version : 1.1.16400.2
Fixed version : 1.1.17800.5
150361 - Security Update for Forefront Endpoint Protection (June 2021)
-
Synopsis
An antimalware application installed on the remote host is affected by multiple vulnerabilities.
Description
The Malware Protection Engine version of Forefront Endpoint Protection installed on the remote Windows host is equal or prior to 1.1.17800.5. It is, therefore, affected by multiple vulnerabilities.

- A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. (CVE-2021-31985)
- A denial of service (DoS) vulnerability. An attacker can exploit this issue to cause the affected component to deny system or application services. (CVE-2021-31978)
See Also
Solution
Enable automatic updates to update the malware engine for the relevant antimalware applications. Refer to Knowledge Base Article 2510781 for information on how to verify that MMPE has been updated.
Risk Factor
Medium
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
8.2 (CVSS:3.0/E:F/RL:O/RC:C)
EPSS Score
0.0188
CVSS v2.0 Base Score
6.8 (CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P)
CVSS v2.0 Temporal Score
5.6 (CVSS2#E:F/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2021-31978
CVE CVE-2021-31985
XREF IAVA:2021-A-0273-S
Plugin Information
Published: 2021/06/08, Modified: 2024/11/28
Plugin Output

tcp/445/cifs


Path : C:\Program Files\Windows Defender\
Installed version : 1.1.16400.2
Fixed version : 1.1.18200.3
152427 - Security Update for Windows Defender (August 2021)
-
Synopsis
An antimalware application installed on the remote host is affected by privilege escalation vulnerability.
Description
The Malware Protection Engine version of Microsoft Windows Defender installed on the remote Windows host is equal or prior to 1.1.18400.4. It is, therefore, affected by a unspecified privilege escalation vulnerability. An authenticated, local attacker can exploit this to gain administrator access to the system.
See Also
Solution
Enable automatic updates to update the malware engine for the relevant antimalware applications. Refer to Knowledge Base Article 2510781 for information on how to verify that MMPE has been updated.
Risk Factor
Medium
CVSS v3.0 Base Score
7.8 (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
6.8 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.002
CVSS v2.0 Base Score
4.6 (CVSS2#AV:L/AC:L/Au:N/C:P/I:P/A:P)
CVSS v2.0 Temporal Score
3.4 (CVSS2#E:U/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2021-34471
XREF IAVA:2021-A-0372
Plugin Information
Published: 2021/08/10, Modified: 2021/08/25
Plugin Output

tcp/445/cifs


Path : C:\Program Files\Windows Defender\
Installed version : 1.1.16400.2
Fixed version : 1.1.18400.4
146334 - Security Update for Windows Defender (February 2021)
-
Synopsis
An antimalware application installed on the remote host is affected by privilege escalation vulnerability.
Description
The Malware Protection Engine version of Microsoft Windows Defender installed on the remote Windows host is equal or prior to 1.1.17700.4. It is, therefore, affected by a unspecified privilege escalation vulnerability. An authenticated, local attacker can exploit this to gain administrator access to the system.
See Also
Solution
Enable automatic updates to update the malware engine for the relevant antimalware applications. Refer to Knowledge Base Article 2510781 for information on how to verify that MMPE has been updated.
Risk Factor
Medium
CVSS v3.0 Base Score
7.8 (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
6.8 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.006
CVSS v2.0 Base Score
4.6 (CVSS2#AV:L/AC:L/Au:N/C:P/I:P/A:P)
CVSS v2.0 Temporal Score
3.4 (CVSS2#E:U/RL:OF/RC:C)
References
Plugin Information
Published: 2021/02/09, Modified: 2021/03/05
Plugin Output

tcp/445/cifs


Path : C:\Program Files\Windows Defender\
Installed version : 1.1.16400.2
Fixed version : 1.1.17800.5
150359 - Security Update for Windows Defender (June 2021)
-
Synopsis
An antimalware application installed on the remote host is affected by multiple vulnerabilities.
Description
The Malware Protection Engine version of Microsoft Windows Defender installed on the remote Windows host is equal or prior to 1.1.17800.5. It is, therefore, affected by multiple vulnerabilities.

- A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. (CVE-2021-31985)
- A denial of service (DoS) vulnerability. An attacker can exploit this issue to cause the affected component to deny system or application services. (CVE-2021-31978)
See Also
Solution
Enable automatic updates to update the malware engine for the relevant antimalware applications. Refer to Knowledge Base Article 2510781 for information on how to verify that MMPE has been updated.
Risk Factor
Medium
CVSS v3.0 Base Score
8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
8.2 (CVSS:3.0/E:F/RL:O/RC:C)
EPSS Score
0.0188
CVSS v2.0 Base Score
6.8 (CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P)
CVSS v2.0 Temporal Score
5.6 (CVSS2#E:F/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2021-31978
CVE CVE-2021-31985
XREF IAVA:2021-A-0273-S
Plugin Information
Published: 2021/06/08, Modified: 2024/11/28
Plugin Output

tcp/445/cifs


Path : C:\Program Files\Windows Defender\
Installed version : 1.1.16400.2
Fixed version : 1.1.18200.3
193217 - Security Updates for Microsoft .NET Framework (April 2024)
-
Synopsis
The Microsoft .NET Framework installation on the remote host is missing a security update.
Description
The Microsoft .NET Framework installation on the remote host is missing a security update. It is, therefore, affected by remote code execution vulnerability.
See Also
Solution
Microsoft has released security updates for Microsoft .NET Framework.
Risk Factor
Medium
CVSS v3.0 Base Score
7.3 (CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
6.4 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.547
CVSS v2.0 Base Score
6.8 (CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
5.0 (CVSS2#E:U/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2024-21409
MSKB 5036604
MSKB 5036605
MSKB 5036606
MSKB 5036607
MSKB 5036608
MSKB 5036609
MSKB 5036610
MSKB 5036611
MSKB 5036612
MSKB 5036613
MSKB 5036614
MSKB 5036615
MSKB 5036618
MSKB 5036619
MSKB 5036620
MSKB 5036621
MSKB 5036624
MSKB 5036625
MSKB 5036626
MSKB 5036627
MSKB 5036631
MSKB 5036632
MSKB 5036633
MSKB 5036634
MSKB 5036636
MSKB 5036637
XREF MSFT:MS24-5036604
XREF MSFT:MS24-5036605
XREF MSFT:MS24-5036606
XREF MSFT:MS24-5036607
XREF MSFT:MS24-5036608
XREF MSFT:MS24-5036609
XREF MSFT:MS24-5036610
XREF MSFT:MS24-5036611
XREF MSFT:MS24-5036612
XREF MSFT:MS24-5036613
XREF MSFT:MS24-5036614
XREF MSFT:MS24-5036615
XREF MSFT:MS24-5036618
XREF MSFT:MS24-5036619
XREF MSFT:MS24-5036620
XREF MSFT:MS24-5036621
XREF MSFT:MS24-5036624
XREF MSFT:MS24-5036625
XREF MSFT:MS24-5036626
XREF MSFT:MS24-5036627
XREF MSFT:MS24-5036631
XREF MSFT:MS24-5036632
XREF MSFT:MS24-5036633
XREF MSFT:MS24-5036634
XREF MSFT:MS24-5036636
XREF MSFT:MS24-5036637
XREF IAVA:2024-A-0219-S
Plugin Information
Published: 2024/04/11, Modified: 2024/07/12
Plugin Output

tcp/445/cifs


Microsoft .NET Framework 4.8
The remote host is missing one of the following rollup KBs :

Cumulative
- 5036608

C:\Windows\Microsoft.NET\Framework\v4.0.30319\system.runtime.serialization.dll has not been patched.
Remote version : 4.8.4536.0
Should be : 4.8.4718.0

202304 - Security Updates for Microsoft .NET Framework (July 2024)
-
Synopsis
The Microsoft .NET Framework installation on the remote host is missing a security update.
Description
The Microsoft .NET Framework installation on the remote host is missing a security update. It is, therefore, affected by remote code execution vulnerability.
See Also
Solution
Microsoft has released security updates for Microsoft .NET Framework.
Risk Factor
Medium
CVSS v3.0 Base Score
7.3 (CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
6.4 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0035
CVSS v2.0 Base Score
6.8 (CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
5.0 (CVSS2#E:U/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2024-38081
MSKB 5041017
MSKB 5041020
MSKB 5041016
MSKB 5041023
MSKB 5041022
MSKB 5041021
MSKB 5041026
MSKB 5039885
MSKB 5041024
MSKB 5041027
MSKB 5039895
MSKB 5041019
MSKB 5041018
XREF MSFT:MS24-5041017
XREF MSFT:MS24-5041020
XREF MSFT:MS24-5041016
XREF MSFT:MS24-5041023
XREF MSFT:MS24-5041022
XREF MSFT:MS24-5041021
XREF MSFT:MS24-5041026
XREF MSFT:MS24-5039885
XREF MSFT:MS24-5041024
XREF MSFT:MS24-5041027
XREF MSFT:MS24-5039895
XREF MSFT:MS24-5041019
XREF MSFT:MS24-5041018
XREF IAVA:2024-A-0399-S
Plugin Information
Published: 2024/07/12, Modified: 2024/10/11
Plugin Output

tcp/445/cifs


Microsoft .NET Framework 4.8
The remote host is missing one of the following rollup KBs :

Cumulative
- 5039884

C:\Windows\Microsoft.NET\Framework\v4.0.30319\system.windows.forms.dll has not been patched.
Remote version : 4.8.4550.0
Should be : 4.8.4734.0

159916 - Security Updates for Windows Defender (April 2022)
-
Synopsis
An antimalware application installed on the remote host is affected by a denial of service vulnerability.
Description
The Malware Protection Engine version of Microsoft Windows Defender installed on the remote Windows host is equal or prior to 1.1.19100.5. It is, therefore, affected by a denial of service vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands.
See Also
Solution
Microsoft has released KB4052623 to address this issue.
Risk Factor
Medium
CVSS v3.0 Base Score
5.5 (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
CVSS v3.0 Temporal Score
5.1 (CVSS:3.0/E:F/RL:O/RC:C)
EPSS Score
0.0065
CVSS v2.0 Base Score
4.3 (CVSS2#AV:N/AC:M/Au:N/C:N/I:N/A:P)
CVSS v2.0 Temporal Score
3.6 (CVSS2#E:F/RL:OF/RC:C)
References
CVE CVE-2022-24548
MSKB 4052623
XREF MSFT:MS22-4052623
Plugin Information
Published: 2022/04/20, Modified: 2023/11/01
Plugin Output

tcp/445/cifs


Path : C:\Program Files\Windows Defender\
Installed version : 1.1.16400.2
Fixed version : 1.1.19100.5
179675 - Security Updates for Windows Defender (August 2023)
-
Synopsis
An antimalware application installed on the remote host is affected by a privilege escalation vulnerability.
Description
The Malware Protection Engine version of Microsoft Windows Defender installed on the remote Windows host is prior to 1.1.23060.3001. It is, therefore, affected by a privilege escalation vulnerability.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Note: this plugin will not fire if Windows Defender is disabled.
See Also
Solution
Enable automatic updates to update the malware engine for the relevant antimalware applications. Refer to Knowledge Base Article 2510781 for information on how to verify that MMPE has been updated.
Risk Factor
Medium
CVSS v3.0 Base Score
7.8 (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
6.8 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0128
CVSS v2.0 Base Score
6.8 (CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
5.0 (CVSS2#E:U/RL:OF/RC:C)
References
Plugin Information
Published: 2023/08/10, Modified: 2024/06/13
Plugin Output

tcp/445/cifs


Path : C:\Program Files\Windows Defender\
Installed version : 1.1.16400.2
Fixed version : 1.1.23060.3001
178243 - Security Updates for Windows Defender (July 2023)
-
Synopsis
An antimalware application installed on the remote host is affected by an elevation of privilege vulnerability.
Description
The Malware Protection Engine version of Microsoft Windows Defender installed on the remote Windows host is prior to 1.1.23050.3. It is, therefore, affected by an elevation of privilege vulnerability.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
See Also
Solution
Microsoft has released KB2267602 to address this issue.
Risk Factor
Medium
CVSS v3.0 Base Score
7.0 (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
6.1 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0024
CVSS v2.0 Base Score
6.0 (CVSS2#AV:L/AC:H/Au:S/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
4.4 (CVSS2#E:U/RL:OF/RC:C)
References
CVE CVE-2023-33156
MSKB 2267602
XREF MSFT:MS23-2267602
Plugin Information
Published: 2023/07/13, Modified: 2023/07/17
Plugin Output

tcp/445/cifs


Path : C:\Program Files\Windows Defender\
Installed version : 1.1.16400.2
Fixed version : 1.1.23050.3
172577 - Security Updates for Windows Defender (March 2023)
-
Synopsis
An antimalware application installed on the remote host is affected by a privilege escalation vulnerability.
Description
The Malware Protection Engine version of Microsoft Windows Defender installed on the remote Windows host is prior to 1.1.20000.2. It is, therefore, affected by a privilege escalation vulnerability. An authenticated attacker can exploit this to gain elevated privileges.
See Also
Solution
Microsoft has released KB4052623 to address this issue.
Risk Factor
Medium
CVSS v3.0 Base Score
6.3 (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H)
CVSS v3.0 Temporal Score
5.5 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0008
CVSS v2.0 Base Score
5.5 (CVSS2#AV:L/AC:H/Au:S/C:N/I:C/A:C)
CVSS v2.0 Temporal Score
4.1 (CVSS2#E:U/RL:OF/RC:C)
References
CVE CVE-2023-23389
MSKB 4052623
XREF MSFT:MS22-4052623
Plugin Information
Published: 2023/03/15, Modified: 2023/03/16
Plugin Output

tcp/445/cifs


Path : C:\Program Files\Windows Defender\
Installed version : 1.1.16400.2
Fixed version : 1.1.20000.2
192025 - Security Updates for Windows Defender (March 2024)
-
Synopsis
An antimalware application installed on the remote host is affected by a security feature bypass vulnerability.
Description
The Antimalware Platform version of Microsoft Windows Defender installed on the remote Windows host is prior to 4.18.24010.12. It is, therefore, affected by a security feature bypass vulnerability. An authenticated attacker who successfully exploited this vulnerability could prevent Microsoft Defender from starting.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
See Also
Solution
Update Microsoft Defender to platform version 4.18.24010.12 to address this issue.
Risk Factor
Medium
CVSS v3.0 Base Score
5.5 (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
CVSS v3.0 Temporal Score
4.8 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0065
CVSS v2.0 Base Score
4.6 (CVSS2#AV:L/AC:L/Au:S/C:N/I:N/A:C)
CVSS v2.0 Temporal Score
3.4 (CVSS2#E:U/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2024-20671
XREF IAVA:2024-A-0155
Plugin Information
Published: 2024/03/13, Modified: 2024/03/15
Plugin Output

tcp/445/cifs


Path : C:\Program Files\Windows Defender\
Installed version : 4.18.1909.6
Fixed version : 4.18.24010.12
185900 - Security Updates for Windows Defender (November 2023)
-
Synopsis
An antimalware application installed on the remote host is affected by a privilege escalation vulnerability.
Description
The Malware Protection Engine version of Microsoft Windows Defender installed on the remote Windows host is prior to 4.18.23100.2009. It is, therefore, affected by a privilege escalation vulnerability. An authenticated attacker can exploit this to gain elevated privileges.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Note: this plugin will not fire if Windows Defender is disabled.
See Also
Solution
Update Microsoft Defender version 4.18.23100.2009 to address this issue.
Risk Factor
Medium
CVSS v3.0 Base Score
7.8 (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
6.8 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0198
CVSS v2.0 Base Score
6.8 (CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C)
CVSS v2.0 Temporal Score
5.0 (CVSS2#E:U/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2023-36422
XREF IAVA:2023-A-0646-S
Plugin Information
Published: 2023/11/16, Modified: 2024/06/13
Plugin Output

tcp/445/cifs


Path : C:\Program Files\Windows Defender\
Installed version : 4.18.1909.6
Fixed version : 4.18.23100.2009
166769 - Security Updates for Windows Defender (October 2022)
-
Synopsis
An antimalware application installed on the remote host is affected by a privilege escalation vulnerability.
Description
The Malware Protection Engine version of Microsoft Windows Defender installed on the remote Windows host is prior to 1.1.19700.3. It is, therefore, affected by a privilege escalation vulnerability. An authenticated attacker can exploit this to gain elevated privileges.
See Also
Solution
Microsoft has released KB4052623 to address this issue.
Risk Factor
Medium
CVSS v3.0 Base Score
7.1 (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H)
CVSS v3.0 Temporal Score
6.6 (CVSS:3.0/E:F/RL:O/RC:C)
EPSS Score
0.0031
CVSS v2.0 Base Score
6.2 (CVSS2#AV:L/AC:L/Au:S/C:N/I:C/A:C)
CVSS v2.0 Temporal Score
5.1 (CVSS2#E:F/RL:OF/RC:C)
References
CVE CVE-2022-37971
MSKB 4052623
XREF MSFT:MS22-4052623
Plugin Information
Published: 2022/11/01, Modified: 2023/10/06
Plugin Output

tcp/445/cifs


Path : C:\Program Files\Windows Defender\
Installed version : 1.1.16400.2
Fixed version : 1.1.19700.3

10114 - ICMP Timestamp Request Remote Date Disclosure
-
Synopsis
It is possible to determine the exact time set on the remote host.
Description
The remote host answers to an ICMP timestamp request. This allows an attacker to know the date that is set on the targeted machine, which may assist an unauthenticated, remote attacker in defeating time-based authentication protocols.

Timestamps returned from machines running Windows Vista / 7 / 2008 / 2008 R2 are deliberately incorrect, but usually within 1000 seconds of the actual system time.
Solution
Filter out the ICMP timestamp requests (13), and the outgoing ICMP timestamp replies (14).
Risk Factor
Low
VPR Score
2.2
EPSS Score
0.0037
CVSS v2.0 Base Score
2.1 (CVSS2#AV:L/AC:L/Au:N/C:P/I:N/A:N)
References
Plugin Information
Published: 1999/08/01, Modified: 2024/10/07
Plugin Output

icmp/0

This host returns non-standard timestamps (high bit is set)
The ICMP timestamps might be in little endian format (not in network format)
The difference between the local and remote clocks is 1 second.

216341 - Microsoft Edge (Chromium) < 133.0.3065.69 Multiple Vulnerabilities
-
Synopsis
The remote host has an web browser installed that is affected by multiple vulnerabilities.
Description
The version of Microsoft Edge installed on the remote Windows host is prior to 133.0.3065.69. It is, therefore, affected by multiple vulnerabilities as referenced in the February 14, 2025 advisory.

- Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability (CVE-2025-21401)

- Use after free in V8. (CVE-2025-0995)

- Inappropriate implementation in Browser UI. (CVE-2025-0996)

- Use after free in Navigation. (CVE-2025-0997)

- Out of bounds memory access in V8. (CVE-2025-0998)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
See Also
Solution
Upgrade to Microsoft Edge version 133.0.3065.69 or later.
Risk Factor
Low
CVSS v3.0 Base Score
9.6 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H)
CVSS v3.0 Temporal Score
8.3 (CVSS:3.0/E:U/RL:O/RC:C)
EPSS Score
0.0008
CVSS v2.0 Base Score
3.7 (CVSS2#AV:L/AC:H/Au:N/C:P/I:P/A:P)
CVSS v2.0 Temporal Score
2.7 (CVSS2#E:U/RL:OF/RC:C)
STIG Severity
I
References
CVE CVE-2025-0995
CVE CVE-2025-0996
CVE CVE-2025-0997
CVE CVE-2025-0998
CVE CVE-2025-21401
XREF IAVA:2025-A-0124-S
Plugin Information
Published: 2025/02/14, Modified: 2025/03/13
Plugin Output

tcp/445/cifs


Path : C:\Program Files (x86)\Microsoft\Edge\Application
Installed version : 92.0.902.67
Fixed version : 133.0.3065.69

192814 - Microsoft Windows 10 22H2 SEoL
-
Synopsis
An unsupported version of Microsoft Windows is installed on the remote host.
Description
Microsoft Windows 10 22H2 is no longer maintained by its vendor or provider.

Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities.
See Also
Solution
Upgrade to a version of Microsoft Windows that is currently supported.
Risk Factor
Low
Plugin Information
Published: 2024/04/02, Modified: 2025/12/22
Plugin Output

tcp/0


OS : Microsoft Windows 10 22H2
Security End of Life : October 13, 2025
Time since Security End of Life (Est.) : >= 1 month
© 2026 Tenable™, Inc. All rights reserved.