India’s nodal cybersecurity agency, the Computer Emergency Response Team (CERT-In), has issued a high-risk security advisory for Google Chrome users across Windows, macOS, and Linux platforms. The alert warns of multiple vulnerabilities in Chrome’s latest builds that could allow remote attackers to execute arbitrary code, steal sensitive data, or cause system crashes.

Flaws Affect Chrome Versions Before 130.0.6723.58

According to CERT-In’s advisory, the vulnerabilities impact Chrome versions prior to 130.0.6723.58, released by Google in late October 2025. The agency stated that these flaws stem from issues such as type confusion, heap buffer overflow, and use-after-free errors in components like V8 engine, GPU, and WebRTC. If exploited, these vulnerabilities could give attackers unauthorized access to a user’s system and compromise their data integrity.

Attackers Could Exploit Flaws via Malicious Web Pages

CERT-In explained that a remote attacker could trick users into visiting a specially crafted malicious webpage, leading to the execution of arbitrary code on the target system. Such exploitation may result in the installation of malware, ransomware, or other malicious payloads without the user’s consent. The agency emphasized that Chrome users are particularly at risk if they have disabled automatic updates.

Google Releases Security Patch; Users Urged to Update Immediately

Google has already released security updates addressing these vulnerabilities. CERT-In strongly recommends users to update their Chrome browsers to the latest version (130.0.6723.58 or later) immediately. Users can manually update Chrome by navigating to Help → About Google Chrome, which will trigger an automatic update and restart.

Additional Security Measures Recommended

Apart from updating, CERT-In also advises users to enable Safe Browsing, avoid visiting untrusted websites, and regularly review installed extensions. Keeping the operating system and antivirus software up to date can further minimize risk exposure. The advisory underscores the importance of timely patching as cyber threats continue to grow more sophisticated and widespread.