India’s top cyber security agency, the Indian Computer Emergency Response Team, has issued a high risk alert for users of the desktop version of Google Chrome after identifying multiple critical vulnerabilities in the popular web browser. The warning, released on December 8, 2025, applies to users operating Chrome on Windows, Mac, and Linux platforms. According to CERT In, these security flaws can be exploited by cyber attackers to gain unauthorised access to systems, steal sensitive personal information, and compromise user privacy.
Google Chrome is one of the most widely used internet browsers in India, making the vulnerability a matter of serious national cyber security concern. CERT In has categorised the threat severity as high, indicating that the risks posed by the flaws are significant and could lead to large scale exploitation if users fail to act promptly. The agency has strongly advised users to update their browsers immediately to the latest available version.
The advisory states that attackers could exploit these vulnerabilities through specially crafted web pages or malicious links. Once compromised, attackers may be able to execute arbitrary code, access stored browser data such as passwords and cookies, and even take control of the affected system. This could result in data theft, financial fraud, identity misuse, and unauthorised access to personal and professional accounts.
Cyber security professionals have warned that delaying software updates is one of the most common reasons users fall victim to hacking incidents. Although many users ignore update notifications due to inconvenience or system restarts, experts say that security updates are released specifically to patch known weaknesses that are already being targeted by attackers.
CERT In has advised users to follow a few basic safety measures. Users must ensure that they are using the latest stable version of Google Chrome by checking the update status in the browser settings. It has also recommended enabling automatic updates so that future security patches are installed without delay. In addition, users have been encouraged to avoid clicking on suspicious links and downloading unknown files while the risk remains active.
The advisory comes at a time when cyber attacks in India are rising sharply across sectors including banking, education, healthcare, and e commerce. With most official, financial, and personal activities now taking place online, browsers have become a primary target for attackers. Any vulnerability in such widely used software increases the risk for both individuals and organisations.
Google has already released updated security patches globally to address the reported vulnerabilities. However, the responsibility of installing these updates lies with individual users and system administrators. Enterprises using Chrome across large networks have also been advised to deploy the latest patches immediately across all devices.
CERT In plays a critical role in monitoring cyber threats in India and regularly issues public advisories to protect citizens and organisations from digital risks. The agency has reiterated that users must take such warnings seriously and act without delay to safeguard their data.
With sensitive personal data, banking credentials, and confidential work information often stored in browsers, cyber security experts have stressed that keeping software updated is one of the simplest yet most effective ways to prevent hacking attempts. Users who have not yet updated their Google Chrome browser are advised to do so immediately to avoid potential cyber attacks.
