Indian government has a ‘critical’ warning for Android and Chrome users: Check if your devices are affected

Android and Chrome

The Indian Computer Emergency Response Team (CERT-In) has issued an important security alert for Android users and the Google Chrome browser. The cybersecurity agency has flagged critical vulnerabilities that could lead to data breaches, unauthorised access, and system instability. These issues have been classified as “High” severity.

Warning details: Android
According to CERT-In, multiple vulnerabilities have been detected in Android versions before 13, 14, and 15. These flaws could allow an attacker to obtain sensitive information, gain elevated privileges, or cause a denial of service on the targeted device.

The advisory warns that the issues stem from components such as the Android Framework, System, Google Play system updates, Kernel, and elements from vendors including Qualcomm, MediaTek, and Imagination Technologies. Devices like smartphones, tablets, and smartwatches running outdated Android versions are affected.
CERT-In has advised users and OEMS to upgrade their systems to Android 13, 14, or 15 to stay protected.

Warning details: Chrome
A separate vulnerability has also been found in Google Chrome for desktop. The affected versions include Chrome versions prior to 135.0.7049.84 for Linux, and 135.0.7049.84/.85 for Windows and macOS.

CERT-In states that the issue arises due to a use-after-free vulnerability in Site Isolation. If exploited, a remote attacker could execute arbitrary code on the system by tricking users into visiting a specially crafted website. This could lead to crashes, unexpected behaviour, or loss of system control.
Users are advised to apply the latest Chrome updates available through Google’s official channel to fix the issue.

What users should do
Both vulnerabilities are rated “High” in severity, and CERT-In recommends that users take immediate action. Android users should update their devices to the latest supported OS version. Chrome users should install the latest stable version provided by Google. The government agency urges individuals, organisations, and device manufacturers to remain vigilant and apply patches as soon as possible.