Chrome 112 Audit
Security Software VulnerabilityFind Outdated Chrome Installations
On April 4th, Google released Chrome 112 for Windows, Linux, and Mac. In this release, Google fixed 16 security issues and added additional features. The new features include:- Chrome 112 enables access to the WebHID API from extension service workers.
- Unused site permissions module in safety check.
- Default to origin-keyed agent clustering.
- Chrome apps are no longer supported on Windows, Mac, and Linux.
- Auto-upgrade mixed content to HTTPS on iOS.
- Chrome Root Store updates and removal of the ChromeRootStoreEnabled policy.
- Updated onboarding experience.
- Policy troubleshooting page available on Android.
- Changes to HTTPS policies.
- Add websites and PWAs to the home screen on iOS.
- New Chrome Sync data types are available in Takeout.
- Autofill on iOS.
- Android WebView phases out the X-Requested-Header starting from version 112.
- Web auth flow to use browser tab instead of App window.
- Chrome for Testing.
- Price tracking on iOS.
Chrome 112 Lansweeper Classic Query
| Severity | CVE | Description |
| High | CVE-2023-1810 | Heap buffer overflow in Visuals |
| High | CVE-2023-1811 | Use after free in Frames |
| Medium | CVE-2023-1812 | Out-of-bounds memory access in DOM Bindings |
| Medium | CVE-2023-1813 | Inappropriate implementation in Extensions |
| Medium | CVE-2023-1814 |
Insufficient validation of untrusted input in Safe Browsing
|
| Medium | CVE-2023-1815 | Use after free in Networking APIs |
| Medium | CVE-2023-1816 | Incorrect security UI in Picture In Picture |
| Medium | CVE-2023-1817 | Insufficient policy enforcement in Intents |
| Medium | CVE-2023-1818 | Use after free in Vulkan |
| Medium | CVE-2023-1819 | Out of bounds read in Accessibility |
| Medium | CVE-2023-1820 | Heap buffer overflow in Browser History |
| Low | CVE-2023-1821 | Inappropriate implementation in WebShare |
| Low | CVE-2023-1822 | Incorrect security UI in Navigation |
| Low | CVE-2023-1823 | Inappropriate implementation in FedCM |
Google Chrome 112 CVE Codes
Select Top 1000000 tblAssets.AssetID,
tblAssets.AssetName,
tblAssets.Domain,
tsysAssetTypes.AssetTypename As AssetType,
tblAssets.Username,
tblAssets.Userdomain,
Coalesce(tsysOS.Image, tsysAssetTypes.AssetTypeIcon10) As icon,
tblAssets.IPAddress,
Software.softwareName As Software,
Software.softwareVersion As Version,
Software.SoftwarePublisher As Publisher,
tsysIPLocations.IPLocation,
tblAssetCustom.Manufacturer,
tblAssetCustom.Model,
Coalesce(tsysOS.OSname, tblSccmAsset.OsCaption,
tblSccmAsset.OperatingSystemNameandVersion) As OS,
tblAssets.Version As OSVersion,
Case
When tblErrors.ErrorText Is Not Null Or
tblErrors.ErrorText != '' Then
'Scanning Error: ' + tsysasseterrortypes.ErrorMsg
Else ''
End As ScanningErrors,
tblAssets.Lastseen As [Last successful scan],
tblAssets.Lasttried As [Last scan attempt]
From tblAssets
Inner Join tblAssetCustom On tblAssets.AssetID = tblAssetCustom.AssetID
Inner Join tsysAssetTypes On tsysAssetTypes.AssetType = tblAssets.Assettype
Inner Join tsysIPLocations On tsysIPLocations.LocationID =
tblAssets.LocationID
Inner Join tblState On tblState.State = tblAssetCustom.State
Left Join (Select tblsoftware.assetid,
tblSoftwareUni.softwareName,
tblsoftware.softwareVersion,
Case
When tblSoftwareUni.softwareName Like '%Google Chrome%' And
((Cast(ParseName(tblsoftware.softwareVersion, 4) As int) < 112) Or
(Cast(ParseName(tblsoftware.softwareVersion, 4) As int) = 112 And
Cast(ParseName(tblsoftware.softwareVersion, 2) As int) < 5615) Or
(Cast(ParseName(tblsoftware.softwareVersion, 4) As int) = 112 And
Cast(ParseName(tblsoftware.softwareVersion, 2) As int) = 5615 And
Cast(ParseName(tblsoftware.softwareVersion, 1) As int) < 49)) Then 1
Else 0
End As [out of date],
tblSoftwareUni.SoftwarePublisher
From tblsoftware
Inner Join tblSoftwareUni On tblSoftwareUni.SoftID = tblsoftware.softID
Where tblSoftwareUni.softwareName Like '%Google Chrome%' And
tblSoftwareUni.SoftwarePublisher Like '%Google%') As Software On
Software.AssetID = tblAssets.AssetID
Left Outer Join tsysOS On tsysOS.OScode = tblAssets.OScode
Left Outer Join tblSccmAsset On tblAssets.AssetID = tblSccmAsset.AssetId
Left Join (Select Distinct Top 1000000 tblErrors.AssetID As ID,
Max(tblErrors.Teller) As ErrorID
From tblErrors
Group By tblErrors.AssetID) As ScanningError On tblAssets.AssetID =
ScanningError.ID
Left Join tblErrors On ScanningError.ErrorID = tblErrors.Teller
Left Join tsysasseterrortypes On tsysasseterrortypes.Errortype =
tblErrors.ErrorType
Where Software.softwareName Like '%Google Chrome%' And
Software.SoftwarePublisher Like '%Google%' And tblState.Statename = 'Active'
And Software.[out of date] = 1
Union
Select Top 1000000 tblAssets.AssetID,
tblAssets.AssetName,
tblAssets.Domain,
tsysAssetTypes.AssetTypename As AssetType,
tblAssets.Username,
tblAssets.Userdomain,
tsysAssetTypes.AssetTypeIcon10 As icon,
tblAssets.IPAddress,
Software.softwareName As Software,
Software.Version As Version,
Software.SoftwarePublisher As Publisher,
tsysIPLocations.IPLocation,
tblAssetCustom.Manufacturer,
tblAssetCustom.Model,
tblMacOSInfo.SystemVersion As OS,
tblAssets.Version As OSVersion,
Case
When tblErrors.ErrorText Is Not Null Or
tblErrors.ErrorText != '' Then
'Scanning Error: ' + tsysasseterrortypes.ErrorMsg
Else ''
End As ScanningErrors,
tblAssets.Lastseen As [Last successful scan],
tblAssets.Lasttried As [Last scan attempt]
From tblAssets
Inner Join tblAssetCustom On tblAssets.AssetID = tblAssetCustom.AssetID
Inner Join tsysAssetTypes On tsysAssetTypes.AssetType = tblAssets.Assettype
Inner Join tsysIPLocations On tsysIPLocations.LocationID =
tblAssets.LocationID
Inner Join tblState On tblState.State = tblAssetCustom.State
Left Join (Select tblMacApplications.assetid,
tblSoftwareUni.softwareName,
tblMacApplications.Version,
Case
When tblSoftwareUni.softwareName Like '%Google Chrome%' And
((Cast(ParseName(tblMacApplications.Version, 4) As int) < 112) Or
(Cast(ParseName(tblMacApplications.Version, 4) As int) = 112
And Cast(ParseName(tblMacApplications.Version, 2) As int) < 5615) Or
(Cast(ParseName(tblMacApplications.Version, 4) As int) = 112
And Cast(ParseName(tblMacApplications.Version, 2) As int) = 5615 And
Cast(ParseName(tblMacApplications.Version, 1) As int) < 49)) Then 1
Else 0
End As [out of date],
tblSoftwareUni.SoftwarePublisher
From tblMacApplications
Inner Join tblSoftwareUni On tblSoftwareUni.SoftID =
tblMacApplications.softid
Where tblSoftwareUni.softwareName Like '%Google Chrome%') As Software On
Software.AssetID = tblAssets.AssetID
Inner Join tblMacOSInfo On tblMacOSInfo.AssetID = tblAssets.AssetID
Left Join (Select Distinct Top 1000000 tblErrors.AssetID As ID,
Max(tblErrors.Teller) As ErrorID
From tblErrors
Group By tblErrors.AssetID) As ScanningError On tblAssets.AssetID =
ScanningError.ID
Left Join tblErrors On ScanningError.ErrorID = tblErrors.Teller
Left Join tsysasseterrortypes On tsysasseterrortypes.Errortype =
tblErrors.ErrorType
Where Software.softwareName Like '%Google Chrome%' And tblState.Statename =
'Active' And Software.[out of date] = 1
Union
Select Top 1000000 tblAssets.AssetID,
tblAssets.AssetName,
tblAssets.Domain,
tsysAssetTypes.AssetTypename As AssetType,
tblLinuxUser.UserName,
tblAssets.Userdomain,
tsysAssetTypes.AssetTypeIcon10 As icon,
tblAssets.IPAddress,
subquery1.Software,
subquery1.Version,
subquery1.Publisher,
tsysIPLocations.IPLocation,
tblAssetCustom.Manufacturer,
tblAssetCustom.Model,
tblLinuxSystem.OSRelease As OS,
tblAssets.Version As OSVersion,
Case
When tblErrors.ErrorText Is Not Null Or
tblErrors.ErrorText != '' Then
'Scanning Error: ' + tsysasseterrortypes.ErrorMsg
Else ''
End As ScanningErrors,
tblAssets.Lastseen As [Last successful scan],
tblAssets.Lasttried As [Last scan attempt]
From tblAssets
Inner Join tblAssetCustom On tblAssets.AssetID = tblAssetCustom.AssetID
Inner Join tsysAssetTypes On tsysAssetTypes.AssetType = tblAssets.Assettype
Inner Join tsysIPLocations On tsysIPLocations.LocationID =
tblAssets.LocationID
Inner Join tblState On tblState.State = tblAssetCustom.State
Inner Join tblLinuxSystem On tblAssets.AssetID = tblLinuxSystem.AssetID
Inner Join tblLinuxUser On tblAssets.AssetID = tblLinuxUser.AssetID
Inner Join tblLinuxUserLogon On tblLinuxUserLogon.Id = tblLinuxUser.id
Inner Join (Select tblLinuxUser.AssetId,
Max(tblLinuxUserLogon.LogonTime) As MaxLogontime
From tblLinuxUser
Inner Join tblLinuxUserLogon On tblLinuxUserLogon.Id = tblLinuxUser.id
Group By tblLinuxUser.assetid) As subquery2 On subquery2.MaxLogontime =
tblLinuxUserLogon.LogonTime
Inner Join (Select tblSoftwareUni.softwareName As Software,
tblSoftwareUni.SoftwarePublisher As Publisher,
tblLinuxSoftware.LastChanged,
tblLinuxSoftware.assetid,
Case
When tblLinuxSoftware.Version Like '%-%' Then
Left(tblLinuxSoftware.Version, CharIndex('-',
tblLinuxSoftware.Version) - 1)
When tblLinuxSoftware.Version Like '%R%' Then
Left(tblLinuxSoftware.Version, CharIndex('R',
tblLinuxSoftware.Version) - 1)
Else tblLinuxSoftware.Version
End As Version
From tblLinuxSoftware
Inner Join tblSoftwareUni On tblSoftwareUni.SoftID =
tblLinuxSoftware.SoftwareUniID
Where tblSoftwareUni.softwareName = 'google-chrome-stable') As subquery1 On
subquery1.assetid = tblAssets.assetid
Left Join (Select Distinct Top 1000000 tblErrors.AssetID As ID,
Max(tblErrors.Teller) As ErrorID
From tblErrors
Group By tblErrors.AssetID) As ScanningError On tblAssets.AssetID =
ScanningError.ID
Left Join tblErrors On ScanningError.ErrorID = tblErrors.Teller
Left Join tsysasseterrortypes On tsysasseterrortypes.Errortype =
tblErrors.ErrorType
Where subquery1.Software = 'google-chrome-stable' And tblState.Statename =
'Active' And ((Cast(ParseName(subquery1.Version, 4) As int) < 112) Or
(Cast(ParseName(subquery1.Version, 4) As int) = 112 And
Cast(ParseName(subquery1.Version, 2) As int) < 5615) Or
(Cast(ParseName(subquery1.Version, 4) As int) = 112 And
Cast(ParseName(subquery1.Version, 2) As int) = 5615 And
Cast(ParseName(subquery1.Version, 1) As int) < 49))
Order By Domain,
AssetName,
Software