CERT-In issues important warning for Google Chrome users about a major security flaw; advises users to do this immediately

The Indian Computer Emergency Response Team (CERT-In), under the Ministry of Electronics and Information Technology, has issued a high-severity security alert for Google Chrome users. The advisory warns of multiple vulnerabilities in Google Chrome for desktop that could allow remote attackers to execute arbitrary code, bypass security restrictions, and gain unauthorized access to sensitive information.

Affected versions
According to the advisory, the flaw affects:
Google Chrome versions prior to 142.0.7444.59 for Linux
Google Chrome versions prior to 142.0.7444.56 for Windows and Mac
The vulnerabilities impact all end-user organizations and individuals using Chrome on desktop systems across major operating systems.

Why these security flaw exists in Chrome CERT-In stated that the vulnerabilities exist due to several issues, including type confusion in V8, inappropriate implementation in WebExtensions, and out-of-bounds read issues in various Chrome components such as WebXR, V8, and ReadableStream. Attackers could exploit these vulnerabilities by persuading users to visit specially crafted web pages, leading to code execution, privilege escalation, or sensitive data exposure.

What's at risk

The agency classified the risk as high, emphasizing that successful exploitation could let attackers gain complete control over affected systems. The vulnerabilities also pose threats of data theft, service disruption, and unauthorized system access, making it crucial for users to take immediate action.