Cyber vulnerabilities pose significant threats to users’ digital security, potentially exposing sensitive information and allowing malicious actors to exploit weaknesses in popular apps and websites. Recently, India’s cybersecurity agency, CERT-In, identified critical vulnerabilities in Google Chrome. These vulnerabilities could allow attackers to gain unauthorised access to user data or compromise system integrity.
CERT-In in its latest advisory note – CIVN-2024-0193, has highlighted multiple vulnerabilities present in Google Chrome versions prior to 126.0.6478.114 for Windows, Mac and Linux systems. The government has marked these vulnerabilities as high severity indicating the huge threat they pose to users’ security.
The vulnerabilities could enable attackers to execute harmful code remotely, steal important information, or disrupt operations on targeted computers. CERT-In highlights that these issues in Google Chrome stem from various sources:
Type Confusion in V8: This vulnerability causes unexpected behaviour in the program, which attackers could exploit to run arbitrary code.
Use after free vulnerabilities: This occurs when a program tries to use memory that has already been released, possibly leading to crashes or unauthorised code execution.
CERT-In advises users to update their Google Chrome to the latest version promptly, as updates often include fixes that address these security flaws.
