India's cyber security agency has issued security alert for Google Chrome browser: Check if you are affected and how to fix it

chrome

• CERT-In alerts on critical Google Chrome desktop vulnerabilities
• Older Chrome versions on Windows, macOS, Linux are affected
• Users urged to update Chrome immediately to fix security flaws

Did our AI summary help?

India’s cyber security agency, the Indian Computer Emergency Response Team (CERT-In), has issued a security advisory warning users about multiple vulnerabilities affecting the Google Chrome browser on desktop platforms. The alert highlights risks that could allow attackers to execute arbitrary code, bypass security restrictions, and access sensitive information on affected systems.

The advisory, identified as CIVN-2026-0116, states that the vulnerabilities impact several versions of Google Chrome used on Windows, macOS, and Linux devices. According to CERT-In, the flaws arise due to issues such as out-of-bounds memory access in Chrome’s media components, improper handling in the V8 JavaScript engine, and implementation problems in developer tools.

Who is affected

The advisory notes that users running older versions of Google Chrome are at risk. Systems affected include:

Google Chrome versions prior to 145.0.7632.116/117 for Windows

Google Chrome versions prior to 145.0.7632.116/117 for macOS

Google Chrome versions prior to 145.0.7632.116 for Linux

CERT-In said that if exploited, these vulnerabilities could allow a remote attacker to execute arbitrary code on the targeted system. In some cases, attackers could also bypass security restrictions or access confidential information stored on the device.

The agency noted that the attack could occur if a user visits a specially crafted malicious webpage designed to exploit the vulnerabilities in the browser.

Risk level and impact

CERT-In has classified the advisory with a “High” severity rating. The agency warned that successful exploitation could lead to remote code execution, information disclosure, and data manipulation. Such attacks could potentially compromise the integrity and security of the affected system.

The advisory applies to individuals, organisations, and enterprises using Chrome for desktop browsing.

How to fix the issue

CERT-In recommends that users update their Google Chrome browser to the latest version released by Google to mitigate the vulnerabilities.

Users can update Chrome by following these steps:

Open the Google Chrome browser.

Click on the three-dot menu in the top-right corner.

Go to “Help” and select “About Google Chrome.”

Chrome will automatically check for updates and install the latest version.

Restart the browser after the update is completed.

Updating the browser ensures that the security patches released by Google are applied, reducing the risk of exploitation.

CERT-In advised users and organisations to apply updates immediately and keep browsers updated regularly to maintain system security.