Government Warns Google Chrome Users of 'Highly Severe' Vulnerabilities, Urges to Install Latest Update

Google Chrome version 101.0.4951.41 for Windows, macOS, and Linux carries fixes to the listed vulnerabilities.

By Jagmeet Singh | Updated: 3 May 2022 13:37 IST

Photo Credit: Pixabay

Google Chrome users could lose their sensitive information as a result of the vulnerabilities

Highlights

CERT-In has released vulnerability note to inform users about the issues
Google released the Chrome update last month
Chrome update included a total of 29 security fixes

Google Chrome on desktop is affected by multiple vulnerabilities that could allow hackers to gain access to sensitive information and bypass security restrictions, the government has warned users through a note released by the Indian Computer Emergency Response Team (CERT-In). The nodal agency for cybersecurity threats has advised Chrome users in the country to update the browser on their systems to avoid security issues. Google had acknowledged the loopholes existed within the Chrome browser and released its update.

CERT-In said in the vulnerability note that the vulnerabilities could allow attackers to remotely execute arbitrary code on the browser and even cause buffer overflow — an attempt to write more data to a fixed length block of memory to corrupt the software — on the targeted system.

The agency has given a 'high' severity rating to the issues impacting the Chrome browser. The vulnerabilities exist due to inappropriate implementation in elements including WebGL, Extensions API, Input, HTML Parser, Web Authentication, and iFrame, heap buffer overflow in WebGPU and Web UI Settings, out-of-bounds memory access in UI Shelf, insufficient data validation in Blink Editing, Trusted Types, and Dev Tools, and incorrect security interface in Downloads.

There were the Use-after-free flaws in elements including Vulkan, SwiftShader, Angle, Device API, Sharing, File System, API, Ozone, Browser Switcher, Bookmarks, Dev Tools, and File Manager and Type Confusion issue in V8 JavaScript engine, CERT-In explained in its note.

Google had acknowledged the issues that are now covered by the Indian agency in a blog post released last month. It also released the Chrome version 101.0.4951.41 for Windows, macOS, and Linux to patch the known issues. The update included a total of 29 security fixes.

CERT-In has urged Chrome users to install the latest version to patch the vulnerabilities that are in the public and could easily be exploited by an attacker.

Should you buy a 4G or 5G budget phone? We discuss this on Orbital, the Gadgets 360 podcast. Orbital is available on Spotify, Gaana, JioSaavn, Google Podcasts, Apple Podcasts, Amazon Music and wherever you get your podcasts.

Affiliate links may be automatically generated - see our ethics statement for details.

Comments

For the latest tech news and reviews, follow Gadgets 360 on X, Facebook, WhatsApp, Threads and Google News. For the latest videos on gadgets and tech, subscribe to our YouTube channel. If you want to know everything about top influencers, follow our in-house Who'sThat360 on Instagram and YouTube.