MeitY via CERT-In issues warning for Google Chrome users using Windows and MacBook devices

Chrome

The Ministry of Electronics and Information Technology (MeitY), through CERT-In, has issued a high-severity security alert for users of Google Chrome on Windows, Mac and Linux devices. The warning comes after multiple vulnerabilities were discovered in Chrome versions prior to 143.0.7499.40 on Windows and macOS, as well as the Linux build of the browser.

According to the security note published on December 8, 2025, these flaws could allow remote attackers to execute code, access sensitive information or bypass security restrictions on affected systems.

CERT-In states that the vulnerabilities stem from issues such as type confusion and race conditions in the V8 engine, inappropriate implementations in Chrome components like WebRTC, DevTools, Split View and media handling, along with use-after-free flaws in Digital Credentials and Media Stream modules. A remote attacker could exploit these weaknesses simply by persuading a user to open a specially crafted webpage.

If successfully exploited, the flaws may allow attackers to run arbitrary code, elevate privileges and gain unauthorized access to sensitive data. The risks also include data theft, browser manipulation and broader compromise of the user's operating system. MeitY has categorised the threat as high severity due to its potential impact on both individual and organizational users.

The warning applies to:

1. Google Chrome versions earlier than 143.0.7499.40/41 for Windows
2. Google Chrome versions earlier than 143.0.7499.40/41 for macOS
3. Google Chrome versions earlier than 143.0.7499.40 for Linux Both Windows PC users and MacBook users are advised to check their Chrome version and update immediately.

CERT-In recommends installing the latest Chrome update released by Google. Users can update Chrome by navigating to Settings → Help → About Google Chrome, where the browser will automatically check for updates.

The important thing to note is that Google has already rolled out the latest Chrome update that includes the patch for the vulnerabilities highlighted by the CERT-In.