CERT-In Alerts Chrome Users About Dangerous Vulnerabilities
CERT-In warns users of critical vulnerabilities in Google Chrome, urging immediate updates to prevent potential data breaches and device compromise.
image for illustrative purpose
India’s cybersecurity agency, CERT-In, has issued a warning regarding two critical vulnerabilities found in the Google Chrome browser. The vulnerabilities, identified as CIVN-2025-0007 and CIVN-2025-0008, pose significant risks to user data and device security, urging Chrome users across Windows, Mac, and Linux platforms to update their browsers immediately.
CERT-In, which operates under the Ministry of Electronics and Information Technology, highlighted that these security flaws could allow cybercriminals to exploit the browser, potentially compromising sensitive information. The agency’s advisory highlights the urgency of applying security patches to prevent unauthorized access and data breaches.
The vulnerabilities affect Chrome versions earlier than 132.0.6834.83/8r for Windows and Mac users, as well as versions before 132.0.6834.110 for Linux. CERT-In’s warning specifically targets desktop and laptop users, with smartphone users being less impacted by these particular flaws.
These vulnerabilities are attributed to several issues within the browser’s underlying code, including out-of-bounds memory access in V8, improper handling of navigation, fullscreen, and other components, as well as an integer overflow in Skia. Other weaknesses include stack buffer overflows and insufficient data validation in Chrome extensions.
Google has already rolled out patches to address these issues, and CERT-In urges users to update their browsers to the latest versions without delay. The cybersecurity body further recommends that all users apply these updates to safeguard their devices against potential exploitation by attackers.
