CERT-In issues important warning for Google Chrome users about a major security flaw; advises users to do this immediately

Chrome

The Indian Computer Emergency Response Team (CERT-In), under the Ministry of Electronics and Information Technology, has issued a high-severity security alert for Google Chrome users. The advisory warns of multiple vulnerabilities in Google Chrome for desktop that could allow remote attackers to execute arbitrary code, bypass security restrictions, and gain unauthorized access to sensitive information.

According to the advisory, the flaw affects:

Google Chrome versions prior to 142.0.7444.59 for Linux

Google Chrome versions prior to 142.0.7444.56 for Windows and Mac

The vulnerabilities impact all end-user organizations and individuals using Chrome on desktop systems across major operating systems.

Why these security flaw exists in Chrome CERT-In stated that the vulnerabilities exist due to several issues, including type confusion in V8, inappropriate implementation in WebExtensions, and out-of-bounds read issues in various Chrome components such as WebXR, V8, and ReadableStream. Attackers could exploit these vulnerabilities by persuading users to visit specially crafted web pages, leading to code execution, privilege escalation, or sensitive data exposure.

The agency classified the risk as high, emphasizing that successful exploitation could let attackers gain complete control over affected systems. The vulnerabilities also pose threats of data theft, service disruption, and unauthorized system access, making it crucial for users to take immediate action.

CERT-In has urged users to apply security updates immediately. The latest stable Chrome version (142.0.7444.56 for Windows and Mac, and 142.0.7444.59 for Linux) includes patches for the identified flaws. Users can update Chrome manually by navigating to:

CERT-In’s latest warning highlights the growing frequency of zero-day vulnerabilities in widely used browsers. Users are advised to update their Chrome browsers without delay to protect their systems from potential exploitation.