Are you using the Google Chrome web browser on your desktop? You should read this warning from the Narendra Modi government. The Computer Emergency Response Team India (CERT-IN) of the Ministry of Electronics and Information Technology has warned of multiple vulnerabilities in Google Chrome for desktop computers.
In a high-severity warning, the IT response team warned that multiple vulnerabilities could allow a remote attacker to execute arbitrary code and bypass security restrictions on the targeted system.
“These vulnerabilities exist in Google Chrome due to post-free use in FedCM, SwiftShader, ANGLE, Blink, Sign-in Flow, Chrome OS Shell,” the CERT-IN warning reads.
The warning also mentioned vulnerabilities such as heap buffer overflow in downloads, insufficient validation of untrusted input in intents, insufficient policy enforcement in cookies, and improper enforcement in the Extension APIs.
“A remote attacker could exploit these vulnerabilities by sending a specially crafted request to the targeted system,” the warning adds.
Computer Emergency Response Team has asked users to urgently update Google Chrome version 104.0.5112.101 by clicking this link.
Recently, CERT-IN also warned Apple iOS, IpadiOS, and MacOS users about a bug indicating that the remote attacker could exploit vulnerabilities to trick a victim into a specially crafted file system.
CERT-IN also discovered vulnerabilities in CISCO software products that could allow an attacker to execute arbitrary code, leak information, and attack cross-site scripting on an affected system.