The version of Google Chrome installed on the remote Windows host is prior to 63.0.3239.84. It is, therefore, affected by multiple vulnerabilities as referenced in the 2017_12_stable-channel-update-for-desktop advisory.

  - Type confusion in WebAssembly in V8 in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2017-15413)

  - Out-of-bounds Write in the QUIC networking stack in Google Chrome prior to 63.0.3239.84 allowed a remote     attacker to gain code execution via a malicious server. (CVE-2017-15407)

  - Heap buffer overflow in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to     potentially exploit heap corruption via a crafted PDF file that is mishandled by PDFium. (CVE-2017-15408)

  - Heap buffer overflow in Skia in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2017-15409)

  - Use after free in PDFium in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially     exploit heap corruption via a crafted PDF file. (CVE-2017-15410, CVE-2017-15411)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 28 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2018-aafdbb5554 advisory.

    Update to Chromium 65. For EPEL7, it has been a long time since a successful build has been possible, so     this will fix a LOT of CVEs.

    CVE-2017-15396     CVE-2017-15407 CVE-2017-15408 CVE-2017-15409 CVE-2017-15410 CVE-2017-15411 CVE-2017-15412 CVE-2017-15413     CVE-2017-15415 CVE-2017-15416 CVE-2017-15417 CVE-2017-15418 CVE-2017-15419 CVE-2017-15420 CVE-2017-15422     CVE-2018-6056 CVE-2018-6406     CVE-2018-6057 CVE-2018-6058 CVE-2018-6059 CVE-2018-6060 CVE-2018-6061 CVE-2018-6062 CVE-2018-6063     CVE-2018-6064 CVE-2018-6065 CVE-2018-6066 CVE-2018-6067 CVE-2018-6068 CVE-2018-6069 CVE-2018-6070     CVE-2018-6071

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
105152	Google Chrome < 63.0.3239.84 Multiple Vulnerabilities	Nessus	Windows	2017/12/11	2025/11/24	high
120695	Fedora 28 : chromium (2018-aafdbb5554)	Nessus	Fedora Local Security Checks	2019/1/3	2025/9/1	high

检测

插件搜索

high

high