[ad_1]
Computer Emergency Response Team (CERT-in) has a warning for users of Google Chrome browser. The government’s cybersecurity watchdog has spotted multiple vulnerabilities and classified them of ‘high severity’. The warning pertains to the discovery of multiple vulnerabilities in Google Chrome for desktop.
These multiple vulnerabilities could be exploited by hackers to gain sensitive information and execute arbitrary code on the targeted system, CERT-in said.
The cybersecurity agency, which comes under the Ministry of Electronics and Information Technology (MeitY), said the vulnerabilities are in Google Chrome versions prior to 122.0.6261.57 for Mac and Linux, and Google Chrome versions prior to 122.0.6261.57/ 58 for Windows.
Why these bugs exist
These vulnerabilities exist in Google Chrome due to Out of bounds memory access in Blink, Use after free in Mojo, Assessibilty; Inappropriate implementation in Site Isolation, Content Security Policy, Navigation and Insufficient policy enforcement in Download.
CERT-In highlighted that a remote attacker could exploit these vulnerabilities by persuading a victim to visit a specially crafted web page.
What users can do
Users of the web browser are advised to install security updates that have started to roll out. It is also advised that users should update their browsers as and when the security updates for them are released by the companies.
How to update Google Chrome
Google automatically updates Chrome and prompts users to relaunch the browser once done. Users can also manually update their browser.
These multiple vulnerabilities could be exploited by hackers to gain sensitive information and execute arbitrary code on the targeted system, CERT-in said.
The cybersecurity agency, which comes under the Ministry of Electronics and Information Technology (MeitY), said the vulnerabilities are in Google Chrome versions prior to 122.0.6261.57 for Mac and Linux, and Google Chrome versions prior to 122.0.6261.57/ 58 for Windows.
Why these bugs exist
These vulnerabilities exist in Google Chrome due to Out of bounds memory access in Blink, Use after free in Mojo, Assessibilty; Inappropriate implementation in Site Isolation, Content Security Policy, Navigation and Insufficient policy enforcement in Download.
CERT-In highlighted that a remote attacker could exploit these vulnerabilities by persuading a victim to visit a specially crafted web page.
What users can do
Users of the web browser are advised to install security updates that have started to roll out. It is also advised that users should update their browsers as and when the security updates for them are released by the companies.
How to update Google Chrome
Google automatically updates Chrome and prompts users to relaunch the browser once done. Users can also manually update their browser.
- Open Google Chrome on your desktop
- Click the three vertical dots in the top-right corner.
- Click on the vertical dots to reveal a drop-down menu, then select ‘Help.’
- Choose ‘About Google Chrome.’
- Google Chrome will automatically check for updates and initiate the installation process.
- Once the update is complete, click the ‘Relaunch’ button.
[ad_2]
Source link