Google Chrome Users on Windows Beware! CERT-In Flags Critical Security Flaws

Google Chrome is one of the most widely used browsers, which also makes it an attractive target for cybercriminals. Now, a new security advisory from India's cybersecurity agency has put Chrome desktop users on alert, warning that several vulnerabilities could put their systems and personal data at risk.

The Indian Computer Emergency Response Team (CERT-In) has classified the issues as critical. Its advisory, CIVN-2026-0524, was published on October 26, 2026, and covers Chrome versions running on Windows, macOS and Linux. Users with older browser versions should install the available security update as soon as possible.

What makes these Chrome security flaws dangerous?

The vulnerabilities are linked to several underlying issues in Chrome, ranging from memory-handling errors to problems with access control and authorisation. CERT-In's advisory lists use-after-free errors, memory corruption, improper input validation, out-of-bounds read and write operations, type confusion, range errors and information leaks among the identified issues.

The risk is not limited to a browser crash. CERT-In warns that an attacker could potentially exploit the flaws to run arbitrary code on a victim's system, access sensitive information, get around security restrictions or trigger a denial-of-service (DoS) condition.

An attack could be carried out by getting a user to open a specially crafted web request. If the exploit succeeds, it could lead to data exposure, system compromise or disruption.

This is why the agency has assigned the vulnerabilities a critical severity rating. While the advisory does not suggest that every Chrome user has been attacked, running an affected version could leave a system exposed.

Which Chrome versions need an update?

CERT-In has identified the following desktop versions as affected:

• Windows and macOS: Google Chrome versions earlier than 156.0.8078.47/.48

• Linux: Google Chrome versions earlier than 156.0.8078.47

If your browser falls within these ranges, you should update it to a version that is no longer affected. CERT-In has directed users and organisations to Google's security updates for further technical information and details about the fixes.

How to update Google Chrome

You do not need to download a separate security patch manually. Chrome can check for updates through its built-in update tool.

Open Chrome and click the three-dot menu in the top-right corner. Go to Help, select About Google Chrome, and let the browser check for an update. If one is available, Chrome will download it. You may need to restart the browser to finish installing it.

Once Chrome has restarted, return to the About Google Chrome page to confirm that the update has been installed.

Users can also check Google's official Chrome Releases blog for information about the security update.

TL;DR? If you use Chrome on your Windows PC, check your browser version rather than assuming it is already protected. The advisory covers macOS and Linux users as well, so the update is relevant beyond Windows.