CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
Percentile
92.2%
The version of Microsoft Edge installed on the remote Windows host is prior to 106.0.1370.34. It is, therefore, affected by multiple vulnerabilities as referenced in the October 3, 2022 advisory.
Use after free in CSS. (CVE-2022-3304)
Use after free in Media. (CVE-2022-3307)
Insufficient policy enforcement in Developer Tools. (CVE-2022-3308)
Insufficient policy enforcement in Custom Tabs. (CVE-2022-3310)
Use after free in Import. (CVE-2022-3311)
Incorrect security UI in Full Screen. (CVE-2022-3313)
Type confusion in Blink. (CVE-2022-3315)
Insufficient validation of untrusted input in Safe Browsing. (CVE-2022-3316)
Insufficient validation of untrusted input in Intents. (CVE-2022-3317)
Note that Nessus has not tested for these issues but has instead relied only on the application’s self-reported version number.
#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##
include('compat.inc');
if (description)
{
script_id(165721);
script_version("1.7");
script_set_attribute(attribute:"plugin_modification_date", value:"2023/10/25");
script_cve_id("CVE-2022-3370", "CVE-2022-3373");
script_xref(name:"IAVA", value:"2022-A-0396-S");
script_name(english:"Microsoft Edge (Chromium) < 106.0.1370.34 Multiple Vulnerabilities");
script_set_attribute(attribute:"synopsis", value:
"The remote host has an web browser installed that is affected by multiple vulnerabilities.");
script_set_attribute(attribute:"description", value:
"The version of Microsoft Edge installed on the remote Windows host is prior to 106.0.1370.34. It is, therefore, affected
by multiple vulnerabilities as referenced in the October 3, 2022 advisory.
- Use after free in CSS. (CVE-2022-3304)
- Use after free in Media. (CVE-2022-3307)
- Insufficient policy enforcement in Developer Tools. (CVE-2022-3308)
- Insufficient policy enforcement in Custom Tabs. (CVE-2022-3310)
- Use after free in Import. (CVE-2022-3311)
- Incorrect security UI in Full Screen. (CVE-2022-3313)
- Type confusion in Blink. (CVE-2022-3315)
- Insufficient validation of untrusted input in Safe Browsing. (CVE-2022-3316)
- Insufficient validation of untrusted input in Intents. (CVE-2022-3317)
Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version
number.");
# https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security#october-3-2022
script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?2c48e7f3");
script_set_attribute(attribute:"see_also", value:"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-3304");
script_set_attribute(attribute:"see_also", value:"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-3307");
script_set_attribute(attribute:"see_also", value:"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-3308");
script_set_attribute(attribute:"see_also", value:"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-3310");
script_set_attribute(attribute:"see_also", value:"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-3311");
script_set_attribute(attribute:"see_also", value:"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-3313");
script_set_attribute(attribute:"see_also", value:"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-3315");
script_set_attribute(attribute:"see_also", value:"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-3316");
script_set_attribute(attribute:"see_also", value:"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-3317");
script_set_attribute(attribute:"see_also", value:"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41035");
script_set_attribute(attribute:"solution", value:
"Upgrade to Microsoft Edge version 106.0.1370.34 or later.");
script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C");
script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H");
script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
script_set_attribute(attribute:"cvss_score_source", value:"CVE-2022-3373");
script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
script_set_attribute(attribute:"vuln_publication_date", value:"2022/09/27");
script_set_attribute(attribute:"patch_publication_date", value:"2022/10/03");
script_set_attribute(attribute:"plugin_publication_date", value:"2022/10/06");
script_set_attribute(attribute:"plugin_type", value:"local");
script_set_attribute(attribute:"cpe", value:"cpe:/a:microsoft:edge");
script_set_attribute(attribute:"stig_severity", value:"I");
script_end_attributes();
script_category(ACT_GATHER_INFO);
script_family(english:"Windows");
script_copyright(english:"This script is Copyright (C) 2022-2023 and is owned by Tenable, Inc. or an Affiliate thereof.");
script_dependencies("microsoft_edge_chromium_installed.nbin");
script_require_keys("installed_sw/Microsoft Edge (Chromium)", "SMB/Registry/Enumerated");
exit(0);
}
include('vcf.inc');
get_kb_item_or_exit('SMB/Registry/Enumerated');
var app_info = vcf::get_app_info(app:'Microsoft Edge (Chromium)', win_local:TRUE);
var constraints = [
{ 'fixed_version' : '106.0.1370.34' }
];
vcf::check_version_and_report(app_info:app_info, constraints:constraints, severity:SECURITY_HOLE);
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3370
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3373
www.nessus.org/u?2c48e7f3
msrc.microsoft.com/update-guide/vulnerability/CVE-2022-3304
msrc.microsoft.com/update-guide/vulnerability/CVE-2022-3307
msrc.microsoft.com/update-guide/vulnerability/CVE-2022-3308
msrc.microsoft.com/update-guide/vulnerability/CVE-2022-3310
msrc.microsoft.com/update-guide/vulnerability/CVE-2022-3311
msrc.microsoft.com/update-guide/vulnerability/CVE-2022-3313
msrc.microsoft.com/update-guide/vulnerability/CVE-2022-3315
msrc.microsoft.com/update-guide/vulnerability/CVE-2022-3316
msrc.microsoft.com/update-guide/vulnerability/CVE-2022-3317
msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41035
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
Percentile
92.2%