Google chrome users in India on high alert: Government warns of 'High Risk'

  • Facebook
  • Twitter
  • Reddit
  • Flipboard
  • Email
  • WhatsApp
Google chrome users in India on high alert: Government warns of 'High Risk'(Image: google.com)
Google chrome users in India on high alert: Government warns of 'High Risk'(Image: google.com)

Delhi : The majority of users rely on Google Chrome, which is owned by Google, as their Google with millions of users using it daily. Google Chrome is so well-liked that the firm decided to give it its own operating system. Since most daily tasks are now completed online, we frequently save and exchange a lot of personal data through our browsers, such as our location and financial information. The Indian government has released a high severity warning for Windows, Mac, and Linux users using Google Chrome versions earlier than 118.0.5993.70 in an effort to keep consumers secure. 

The Ministry of Electronics and Information Technology's Indian Computer Emergency Response Team (CERT-In) has discovered that the Google browser has a number of vulnerabilities that might allow hackers to take control of your device and create a denial of service. Google occasionally releases browser updates to keep users up to date. Nevertheless, a lack of data, storage, or user-friendliness prevents many users from updating the program frequently. Because of the vulnerabilities that are revealed, devices running earlier versions of the app are more vulnerable to attacks. The Indian government has now included a couple of these serious vulnerabilities in its alert for Google's app users.

These vulnerabilities in Google Chrome are attributed to heap buffer overflow in PDFs; inappropriate implementation in Fullscreen, Navigation, DevTools, Intents, Downloads, Extensions API, Autofill, Installer, and Input; and use after free in Site Isolation, Blink History, and Cast. By submitting a specifically constructed request to the targeted system, a remote attacker might take advantage of these vulnerabilities.

A remote attacker may be able to run arbitrary code and impose a denial of service (DoS) situation on the targeted machine if these vulnerabilities are successfully exploited. Users should apply the necessary fixes as directed by Google to prevent fraud.