Google Chrome Users Stay Vigilant! Government Issues Security Alert Over Critical Flaws and How to Fix It

The Indian Computer Emergency Response Team (CERT-In) has issued a security alert for Google Chrome users on Windows, macOS, and Linux. This warning highlights critical vulnerabilities in older versions of the browser that could allow attackers to gain control over devices. The agency, part of the Ministry of Electronics and Information Technology (MeitY), stresses the importance of updating to the latest version.

According to CERT-In, these vulnerabilities are present in Chrome versions below 136.0.7103.113 on Linux and 136.0.7103.113 or 136.0.7103.114 on Windows and macOS. Two specific issues have been identified: a loader security flaw and improper data handling within Mojo, a tool used for inter-process communication in Chromium-based browsers.

Security Flaws and Exploitation

Attackers have already begun exploiting one of these vulnerabilities, specifically CVE-2025-4664. This flaw can be leveraged by directing users to malicious websites or links, enabling attackers to take full control of a user's device, install malware, or steal sensitive information.

If attackers successfully execute arbitrary code through these vulnerabilities, it could lead to unauthorised access to sensitive data, compromised system integrity, and potential installation of malware or spyware on affected devices.

Updating Google Chrome

CERT-In advises all desktop users of Google Chrome to update their browsers immediately to the latest version available. Google has confirmed that the new version addresses these critical vulnerabilities effectively.

To update your browser, open Google Chrome and click on the three dots in the upper right corner. Select 'Help' followed by 'About Google Chrome.' The browser will automatically check for updates and install them if available. Restarting the browser completes this process.

Keeping software up-to-date is crucial for maintaining security against potential threats. Regular updates ensure that known vulnerabilities are patched promptly, reducing the risk of exploitation by malicious actors.