Centre issues high-risk warning for Google Chrome, Android users; multiple vulnerabilities identified
PTC News Desk: The Indian government has issued another high-risk warning to users of Google Chrome and Android operating systems. Multiple vulnerabilities have been identified by the Indian Computer Emergency Response Team (CERT-In), which hackers might use to take over computers.
CERT-In has highlighted these concerns in two recent warnings (CIVN-2024-0319 and CIVN-2024-0318), recommending users take immediate action to mitigate the risks.
CERT-In has detected many vulnerabilities in Android and Google Chrome, which might expose millions of devices to hackers. The vulnerabilities have been classified as "high severity," and if exploited, they might allow cyber attackers to execute arbitrary code, potentially resulting in a complete system compromise.
According to CERT-In, these vulnerabilities exist in many versions of Android and Chrome, potentially exposing millions of devices and users to security breaches. According to the government's cybersecurity team, vulnerabilities in Android and Chrome can be exploited in a variety of ways, most notably through malicious websites or applications.
In Google Chrome, the vulnerabilities include an integer overflow in the Layout feature, incorrect implementation in the V8 JavaScript engine, and type confusion in V8. If a cyberattacker convinces a victim to visit a specially constructed web page, they may execute arbitrary code, resulting in unauthorised system access. The attacker might then take control of sensitive data or install malware on the compromised device.
Similarly, the vulnerabilities found in Android affect various essential components, including the Framework, System, and subcomponents from MediaTek and Qualcomm.
Google Chrome vulnerabilities affect versions before:
129.0.6668.89/.90 for Windows and Mac
129.0.6668.89 for Linux
129.0.6668.100/.101 for Windows and Mac
129.0.6668.100 for Linux
Android vulnerabilities have been identified in several versions:
Android 12
Android 12L
Android 13
Android 14
Android 15
- PTC NEWS