Chrome users, here’s why government wants you to update your browser right now – Times of India
What’s the warning
The advisory states that “Multiple vulnerabilities have been reported in Google Chrome which could be exploited by an attacker to execute arbitrary code and gain access to sensitive information on the targeted system.” This is a serious matter that demands immediate attention to protect users’ data and systems from potential breaches.
These vulnerabilities, classified as high-severity, are attributed by CERT-In to several factors, including ‘use after free’ scenarios in prompts, Web Payments API, SwiftShader, Vulkan, Video, and WebRTC. Additionally, a heap buffer overflow in Video and an integer overflow in PDF have also contributed to the issue. The concerning part is that a remote attacker could potentially exploit these vulnerabilities by luring unsuspecting victims to visit maliciously crafted web pages.
Here is a list of the vulnerabilities highlighted by CERT-In:
- CVE-2023-4427
- CVE-2023-4428
- CVE-2023-4429
- CVE-2023-4430
- CVE-2023-4431
Affected Versions:
- Google Chrome versions prior to 116.0.5845.110/.111 for Windows
- Google Chrome versions prior to 116.0.5845.110 for Mac and Linux
What can users do?
To safeguard your system and data, CERT-In strongly recommends that users immediately apply the latest available security patches for Google Chrome. On a positive note, Google has already released the latest version of Chrome, which includes fixes for these vulnerabilities.
function loadGtagEvents(isGoogleCampaignActive) { if (!isGoogleCampaignActive) { return; } var id = document.getElementById('toi-plus-google-campaign'); if (id) { return; } (function(f, b, e, v, n, t, s) { t = b.createElement(e); t.async = !0; t.defer = !0; t.src = v; t.id = 'toi-plus-google-campaign'; s = b.getElementsByTagName(e)[0]; s.parentNode.insertBefore(t, s); })(f, b, e, 'https://www.googletagmanager.com/gtag/js?id=AW-877820074', n, t, s); };
window.TimesApps = window.TimesApps || {}; var TimesApps = window.TimesApps; TimesApps.toiPlusEvents = function(config) { var isConfigAvailable = "toiplus_site_settings" in f && "isFBCampaignActive" in f.toiplus_site_settings && "isGoogleCampaignActive" in f.toiplus_site_settings; var isPrimeUser = window.isPrime; if (isConfigAvailable && !isPrimeUser) { loadGtagEvents(f.toiplus_site_settings.isGoogleCampaignActive); loadFBEvents(f.toiplus_site_settings.isFBCampaignActive); } else { var JarvisUrl="https://jarvis.indiatimes.com/v1/feeds/toi_plus/site_settings/643526e21443833f0c454615?db_env=published"; window.getFromClient(JarvisUrl, function(config){ if (config) { loadGtagEvents(config?.isGoogleCampaignActive); loadFBEvents(config?.isFBCampaignActive); } }) } }; })( window, document, 'script', );
For all the latest Technology News Click Here
