Urgent Warning: Google Chrome Vulnerabilities Pose Major Security Threats

Post Views: 15

CERT-In has issued a warning regarding critical security vulnerabilities in Google Chrome that could expose devices and sensitive data to cyber threats.

Overview of the Security Advisory

CERT-In has issued a warning regarding critical security vulnerabilities in Google Chrome that could expose devices and sensitive data to cyber threats. The advisory highlights multiple weaknesses in the browser’s desktop version, which could be exploited by attackers to execute arbitrary code, access confidential information, or trigger denial-of-service conditions.

Affected Versions

The affected versions include Chrome releases prior to 155.0.8059.79 on Linux and 155.0.8059.79/.80 on Windows and macOS.

Patches and Updates

Google has released patches to address these issues, with updates being distributed incrementally to users. The latest Chrome update resolves 37 security flaws, including a critical vulnerability in the ANGLE graphics component, designated CVE-2026-110152.

Vulnerabilities and Their Impact

This flaw involves a buffer overflow that could allow unauthorized data to be written beyond allocated memory, potentially leading to system crashes or malicious code execution. Additionally, six use-after-free vulnerabilities were addressed, impacting PDF handling, networking, SVG rendering, media processing, and core browser functions.

Specific Vulnerabilities

These vulnerabilities arise when software attempts to access memory that has already been freed, creating opportunities for attackers to disrupt operations or inject malicious payloads. Other affected components include the V8 JavaScript engine, Passwords module, Extensions framework, WebRTC, DOM, PDFium, and Canvas.

High-Severity Flaw in V8 Engine

A high-severity use-after-free flaw in the V8 engine, tracked as CVE-2026-110169, was reported by Xinyang Ge of Anthropic with support from Claude.

Recommendations for Users

The range of impacted elements underscores the complexity of modern browsers, where vulnerabilities can emerge across functions such as content rendering, document processing, and network communication. Users are advised to update Google Chrome to the latest version to mitigate risks.

Updating Chrome

The update can be checked via the browser’s three-dot menu under Help > About Google Chrome. Chrome automatically scans for updates, but availability may vary due to gradual deployment. If the latest version is not immediately visible, users should check again later.

Microsoft Edge Users

Microsoft Edge users may also face risks due to shared Chromium components, though Microsoft had not yet released a stable update for the affected vulnerabilities at the time of the report. The company acknowledged the Chromium security fixes and indicated ongoing efforts to address them.

Importance of Regular Updates

Regular browser updates are essential to address evolving threats. Browsers process diverse data from websites, documents, and extensions, making them prime targets for exploitation. CERT-In’s advisory emphasizes the dangers of retaining outdated versions with known flaws.

Conclusion

Applying security patches reduces exposure to attacks and ensures protection against emerging threats. The warning reinforces the necessity of maintaining up-to-date software. The vulnerabilities affect core Chrome components, with some capable of enabling malicious code execution.