The Indian Computer Emergency Response Team CERT-In has released a high-risk security advisory warning Google Chrome desktop users about a critical vulnerability that could expose systems to remote cyberattacks. According to the advisory, the flaw allows attackers to execute arbitrary code on targeted devices, potentially leading to data theft, system compromise, or unauthorized access.
The vulnerability affects Google Chrome desktop versions across major operating systems, including Windows, macOS, and Linux. CERT-In stated that users running outdated versions of the browser are particularly at risk, as attackers could exploit the flaw simply by convincing victims to visit a specially crafted malicious website.
Affected Google Chrome Versions
CERT-In confirmed that the following versions are vulnerable:
Google Chrome versions earlier than 144.0.7559.109 or 144.0.7559.110 on Windows and macOS
Google Chrome versions earlier than 144.0.7559.109 on Linux
Users operating any of the above versions are advised to update immediately to the latest stable release provided by Google.
Nature of the Threat
The vulnerability is classified as high severity due to its potential impact. Successful exploitation could allow attackers to run malicious code remotely without the user’s knowledge. This could lead to data loss, identity theft, unauthorized system control, or installation of malware.
CERT-In highlighted that such vulnerabilities are often actively exploited in the wild, especially when updates are delayed. Given Chrome’s widespread use in India, the advisory carries significant importance for individual users, businesses, and government organisations.
Who Is at Risk
All Google Chrome desktop users are considered potential targets, particularly those who have not enabled automatic updates. Enterprise systems, educational institutions, and offices using older browser versions face increased risk if security patches are not applied promptly.
Recommended Actions by CERT-In
CERT-In has urged users to take the following steps to stay protected:
Update Google Chrome to the latest stable version immediately
Enable automatic browser updates to receive future security patches
Avoid clicking on suspicious links or visiting unknown websites
Use updated antivirus and endpoint security solutions
Restart the browser after installing updates to ensure patches are applied
Google has already released security updates addressing the issue, and users are encouraged to install them without delay.
Why Timely Updates Matter
Cybersecurity experts warn that browser vulnerabilities are among the most commonly exploited attack vectors. Delayed updates give hackers a window to target unpatched systems, making timely installation of security fixes essential.
CERT-In regularly monitors and issues advisories on emerging cyber threats to safeguard India’s digital ecosystem. Users are advised to follow official alerts and maintain basic cyber hygiene to reduce exposure to evolving online risks.
