Critical Vulnerabilities Put Users At Risk
Key Highlights
- CERT-In has issued a high-severity warning for Google Chrome users.
- The vulnerabilities affect Chrome on Windows, macOS and Linux.
- Attackers could potentially execute malicious code remotely.
- Exploitation may also lead to unauthorised access to sensitive information.
- The flaws are linked to multiple use-after-free vulnerabilities in Chrome components.
- A specially crafted webpage or malicious link could be used to exploit the flaws.
- Google has released security updates addressing the vulnerabilities.
- Users are advised to update Chrome immediately.
New Delhi, August 17: The Indian Computer Emergency Response Team (CERT-In) has issued a high-severity security warning for Google Chrome users, highlighting multiple vulnerabilities that could allow attackers to remotely execute malicious code, access sensitive information or disrupt affected systems.
The warning covers desktop versions of Chrome running on Windows, macOS and Linux. CERT-In has urged users to install the latest browser updates to reduce the risk of exploitation.
Critical Chrome Vulnerabilities
According to CERT-In, the vulnerabilities affect several Chrome components, including V8, TabStrip, HTML, Extensions and Blink.
The flaws are primarily linked to use-after-free vulnerabilities, which can potentially allow an attacker to manipulate browser memory and execute unauthorised operations.
An attacker could exploit the vulnerabilities by convincing a user to open a specially crafted webpage or malicious web request.
Successful exploitation could result in arbitrary code execution or a denial-of-service condition on the affected system.
Which Chrome Versions Are Affected?
CERT-In said the warning applies to Chrome versions prior to:
- 151.0.7922.137/.138 on Windows and macOS
- 151.0.7922.137 on Linux
Users running older versions are advised to update their browsers as soon as possible.
Risk Of Data Theft
The vulnerabilities could have serious consequences if successfully exploited.
An attacker who gains control over a vulnerable system could potentially access sensitive information stored on the device, including passwords and financial details.
The attack could also result in system instability, memory corruption or disruption of important services.
The risk applies to both individual users and organisations using affected Chrome versions.
Google Releases Security Updates
Google has released security updates to address the reported vulnerabilities.
CERT-In has advised users to ensure that their Chrome browser is running the latest available version and that all pending security updates have been installed.
Keeping browsers updated is particularly important when security patches address vulnerabilities that can be triggered through malicious websites or links.
How To Update Chrome
Users can manually check for updates by opening Google Chrome and selecting the three-dot menu in the top-right corner.
They should then go to:
Help → About Google Chrome
Chrome will automatically check for available updates and download the latest version.
After the update is downloaded, users should select Relaunch to complete the installation and activate the security fixes.
Immediate Update Recommended
The CERT-In warning highlights the risks associated with continuing to use outdated browser software.
Because the vulnerabilities could potentially be exploited through malicious webpages, simply browsing an unsafe website could expose users running affected versions to an attack.
For users and organisations operating vulnerable Chrome versions, installing the latest available update remains the primary security measure recommended by CERT-In.
