The Indian government has issued a new warning for Google Chrome users about serious security problems found in the browser. The Indian Computer Emergency Response Team (CERT-In) reports that these vulnerabilities could put users at risk of cyber attacks.
On September 26, 2024, CERT-In released a note identifying several high-risk issues in Google Chrome. These vulnerabilities stem from flaws in Chrome's JavaScript engine and improper handling of browser operations, which can lead to serious security threats.
If hackers exploit these vulnerabilities, they could take control of users’ systems, steal personal information, or crash the browser. CERT-In highlighted three main issues:
- Type Confusion in V8: This occurs when the code doesn’t handle variables correctly, causing unexpected behaviour.
- Use-after-free vulnerabilities: These happen when a program fails to clear memory after use, allowing attackers to manipulate that memory.
- Inappropriate implementation: This involves improper handling of certain operations in the browser, making it vulnerable to remote attacks.
Affected Versions of Google Chrome:
- Versions prior to 129.0.6668.70/.71 for Windows and Mac
- Versions prior to 129.0.6668.70 for Linux
All platforms, including Windows, macOS, and Linux, are affected. Users are urged to update their Chrome browsers immediately to the latest version to protect themselves.
How to Update Your Chrome Browser:
- Open Chrome.
- Click on the three dots in the top right corner.
- Select "Help."
- Click "About Google Chrome."
- If an update is available, click "Update Google Chrome."
Updating to version 129.0.6668.70 or later is essential for keeping your system safe.