Chrome: Google Chrome users, here’s why government want you to update your browser right now – Times of India
If you are a Google Chrome user, then the government has an important warning for you. Indian Computer Emergency Response Team (CERT-IN) has issued a warning for Google Chrome users and has categorised it as ‘high severity’. Along with this, the government body has listed down the recently found vulnerabilities in the Google Chrome browser.
For those unfamiliar with CERT-IN, it is a nodal agency under the Ministry of Electronics and Information Technology. It deals with cybersecurity threats like phishing and hacking.
What government has said
According to the report, “Multiple vulnerabilities have been reported in Google Chrome which could be exploited by an attacker to execute arbitrary code and gain access to sensitive information on the targeted system.”
Who all are affected
CERT-In has mentioned that users running the Google Chrome version prior to 110.0.5481.77/.78 for Windows and 110.0.5481.77 for Mac and Linux are affected by the recently found vulnerabilities.
Why these vulnerabilities exist
As per the description provided by CERT-In, “these vulnerabilities exist in Google Chrome due to Type Confusion in V8, Data Transfer and DevTools; Inappropriate implementation in Full-screen mode and Download; Out of bounds read in WebRTC; Use after free in GPU; Heap buffer overflow in WebUI; Insufficient policy enforcement in DevTools & Integer overflow in Core.”
The government body has further clarified that successful exploitation of these vulnerabilities can allow attackers to execute arbitrarily and gain access to sensitive information on the targeted system.
What users can do
CERT-In has advised users to apply the latest update for Google Chrome available. Thankfully, Google has already rolled out the latest Chrome update. So, head to Settings — About Chrome — Check for latest update. If the update is available, install it and you are all set.
For those unfamiliar with CERT-IN, it is a nodal agency under the Ministry of Electronics and Information Technology. It deals with cybersecurity threats like phishing and hacking.
What government has said
According to the report, “Multiple vulnerabilities have been reported in Google Chrome which could be exploited by an attacker to execute arbitrary code and gain access to sensitive information on the targeted system.”
Who all are affected
CERT-In has mentioned that users running the Google Chrome version prior to 110.0.5481.77/.78 for Windows and 110.0.5481.77 for Mac and Linux are affected by the recently found vulnerabilities.
Why these vulnerabilities exist
As per the description provided by CERT-In, “these vulnerabilities exist in Google Chrome due to Type Confusion in V8, Data Transfer and DevTools; Inappropriate implementation in Full-screen mode and Download; Out of bounds read in WebRTC; Use after free in GPU; Heap buffer overflow in WebUI; Insufficient policy enforcement in DevTools & Integer overflow in Core.”
The government body has further clarified that successful exploitation of these vulnerabilities can allow attackers to execute arbitrarily and gain access to sensitive information on the targeted system.
What users can do
CERT-In has advised users to apply the latest update for Google Chrome available. Thankfully, Google has already rolled out the latest Chrome update. So, head to Settings — About Chrome — Check for latest update. If the update is available, install it and you are all set.
For all the latest Technology News Click Here
For the latest news and updates, follow us on Google News.
Denial of responsibility! NewsUpdate is an automatic aggregator around the global media. All the content are available free on Internet. We have just arranged it in one platform for educational purpose only. In each content, the hyperlink to the primary source is specified. All trademarks belong to their rightful owners, all materials to their authors. If you are the owner of the content and do not want us to publish your materials on our website, please contact us by email – [email protected]. The content will be deleted within 24 hours.
