The Indian Computer Emergency Response Team (CERT-In), the nation's cybersecurity watchdog, has issued multiple high-severity warnings for Google Chrome users in recent months, urging them to update their browsers immediately to safeguard their systems against potential cyberattacks. These advisories primarily target users on Windows, macOS, and Linux platforms, highlighting critical vulnerabilities that could allow remote attackers to compromise user data, execute arbitrary code, and even take control of affected systems.
Specifically, CERT-In has identified several vulnerabilities stemming from inadequate policy enforcement in Chrome's Loader component and improper management in Mojo, which handles inter-process communication. Exploiting these flaws could enable attackers to inject malware, steal sensitive information, or cause system crashes. In some instances, CERT-In has noted that these vulnerabilities are already being actively exploited by cybercriminals in real-world attacks, making it imperative for users to take immediate action.
The affected Chrome versions vary depending on the specific vulnerability being addressed. For example, one warning in May 2025, pertained to Chrome versions prior to 136.0.7103.113 on Linux, and versions prior to 136.0.7103.113 or 136.0.7103.114 on Windows and Mac. Another warning in March 2025, advised users running versions below 134.0.6998.88/89 on Windows and Mac, or 134.0.6998.88 on Linux to update immediately. These older versions contain flaws linked to key components in the browser, like Loader and Mojo and also heap buffer overflow in HTML, out-of-bounds memory access, inappropriate implementation in DevTools and insufficient data validation.
To mitigate these risks, CERT-In strongly recommends that all users and organizations running Google Chrome on desktop computers ensure they are using the latest version of the browser. Updating Chrome is a straightforward process: users can open Chrome, click on the three-dot menu in the top-right corner, navigate to "Help," and then select "About Google Chrome." The browser will automatically check for available updates and install them. A browser restart completes the update. Users are also advised to enable automatic updates to ensure that security patches are applied as soon as they are released by Google.
These warnings underscore the importance of maintaining up-to-date software to protect against evolving cyber threats. By promptly applying security patches and adhering to CERT-In's recommendations, Chrome users can significantly reduce their risk of falling victim to malicious attacks and safeguard their sensitive data.
