CERT-In Warns of High-Risk Vulnerabilities in Google Chrome: Update Now to Protect Your Data
The Indian Computer Emergency Response Team ( CERT-In ) issued an advisory on May 16, warning users of security flaws in Google Chrome that could allow remote attackers to execute arbitrary code. The advisory, with a ‘HIGH’ severity rating, identified Google Chrome versions prior to 136.0.7103.113/.114 for Windows and Mac and Google Chrome versions prior to 136.0.7103.113 for Linux as being vulnerable. CERT-In advises users to update Google Chrome to the latest version to mitigate these risks, as some vulnerabilities are being actively exploited by hackers.
CERT-In serves as India’s nodal cybersecurity agency. It has identified potential targets as all end-user organisations and individuals using Google Chrome on desktop computers running Windows, macOS, or Linux operating systems.
“Multiple vulnerabilities have been reported in Google Chrome which could allow a remote attacker to execute arbitrary code on the targeted system,” CERT-In said in its advisory.
The agency pointed out that some vulnerabilities in Google Chrome are being actively exploited by hackers. These exploits can compromise systems and grant access to sensitive information.
“A remote attacker could exploit these vulnerabilities by persuading a victim to visit a specially crafted web page. Successful exploitation of these vulnerabilities could allow a remote attacker to execute arbitrary code on the targeted system,” the advisory read.
CERT-In has advised all users to apply patches or mitigation measures urgently. The primary recommendation is to update Google Chrome to the latest version.
Google released an update to the affected versions of Chrome software on May 14. This update includes four security fixes.
To check the Chrome version, users can open Google Chrome, click on More (three dotted lines) at the top right corner, click Help, and select About Chrome.
Chrome typically updates automatically in the background. However, a pending update may exist if the browser hasn’t been closed recently.
To manually update, users can open Google Chrome, click on More (three dotted lines) at the top right corner, and select Help > About Google Chrome > Relaunch.
If the ‘Relaunch’ option is not visible, it indicates that the user is already on the latest version of Google Chrome.
CERT-In serves as India’s nodal cybersecurity agency. It has identified potential targets as all end-user organisations and individuals using Google Chrome on desktop computers running Windows, macOS, or Linux operating systems.
“Multiple vulnerabilities have been reported in Google Chrome which could allow a remote attacker to execute arbitrary code on the targeted system,” CERT-In said in its advisory.
The agency pointed out that some vulnerabilities in Google Chrome are being actively exploited by hackers. These exploits can compromise systems and grant access to sensitive information.
“A remote attacker could exploit these vulnerabilities by persuading a victim to visit a specially crafted web page. Successful exploitation of these vulnerabilities could allow a remote attacker to execute arbitrary code on the targeted system,” the advisory read.
CERT-In has advised all users to apply patches or mitigation measures urgently. The primary recommendation is to update Google Chrome to the latest version.
Google released an update to the affected versions of Chrome software on May 14. This update includes four security fixes.
To check the Chrome version, users can open Google Chrome, click on More (three dotted lines) at the top right corner, click Help, and select About Chrome.
Chrome typically updates automatically in the background. However, a pending update may exist if the browser hasn’t been closed recently.
To manually update, users can open Google Chrome, click on More (three dotted lines) at the top right corner, and select Help > About Google Chrome > Relaunch.
If the ‘Relaunch’ option is not visible, it indicates that the user is already on the latest version of Google Chrome.
Next Story