Government issues critical warning to Google Chrome users against security flaws
CERT-In has mentioned that these are critical vulnerabilities, which if exploited, could allow hackers to execute arbitrary code on targeted devices.
The Indian Computer Emergency Response Team (CERT-In), which operates under the Ministry of Electronics and Information Technology (MeitY), has issued fresh warnings of "high" severity to Google Chrome users, underscoring that the popular web browser has multiple security flaws that hackers could exploit to take control over devices. These vulnerabilities, the agency said, impact Google Chrome versions before 130.0.6723.69/.70 for Windows and Mac, and versions prior to 130.0.6723.69 for Linux.
Critical vulnerabilities
In a post on its website, CERT-In has mentioned that these are critical vulnerabilities, which if exploited, could allow hackers to execute arbitrary code on targeted devices, such as a PC or Mac. Having arbitrary access to a device gives hackers unauthorised access to the device and the data stored on it. That means sensitive information such as passwords, bank details, addresses, and other personal details are at a theft risk. In worse scenarios, hackers could leverage the data to ask for a ransom and commit other financial frauds.
The team highlighted that the security flaws originate from inappropriate implementations in Chrome's Extensions and Type Confusion in V8. While Google patched the vulnerabilities in the more recent Chrome versions for Windows, Mac, and Linux, it left out the older versions. So, a user of an old Google Chrome version may be at risk of losing their device's access to hackers.
What should Google Chrome users do
CERT-In has advised users to immediately update their Chrome browsers to safeguard their machines and data from hackers. The latest Chrome 130 update fixes the vulnerabilities across all platforms, including the targeted ones. Users can head to the About Chrome section in browser settings, available within the three-dot menu, to download the latest version and relaunch the browser to apply the update.