Government issues ‘high-risk’ warning for Google Chrome users: How to protect against hacking | #hacking | #cybersecurity | #infosec | #comptia | #pentest | #hacker

The Indian Computer Emergency Response Team (CERT-In) has issued a high-severity security advisory warning millions of desktop Google Chrome users about multiple critical vulnerabilities that could allow hackers to remotely compromise targeted devices. According to the vulnerability note released by the cybersecurity agency, the security flaws impact Google Chrome across Windows, macOS and Linux systems. These vulnerabilities may create a direct risk of unauthorised remote code execution, system takeover, and denial-of-service (DoS) conditions.

How the attack works

The agency explained that the vulnerabilities stem from memory management issues, specifically “use-after-free” errors within core components of the browser, including V8, TabStrip, HTML, Extensions, and Blink.A remote attacker can exploit these flaws by tricking a user into clicking a malicious link or visiting a specially crafted web page. Once accessed, the attacker may trigger arbitrary code execution, enabling them to gain unauthorised access to the computer, steal sensitive data like passwords and bank details, corrupt system memory or shut down critical services.Affected versions include desktop users running outdated versions of the browser:Windows and macOS: Google Chrome builds prior to 151.0.7922.137/.138Linux: Google Chrome builds prior to 151.0.7922.137Both individual users and enterprise organisations have been classified as potential targets, with CERT-In urging immediate mitigation to prevent potential exploitation.

How to protect yourself

Google has rolled out a security patch to fix the underlying flaws. As browsers may not immediately apply updates automatically, users are advised to verify and install the latest version manually. Here are the steps to update Google Chrome on desktop: