New Delhi: A high-severity security alert has been issued by the Indian Computer Emergency Response Team, which is a part of the Ministry of Electronics and Information Technology, for Google Chrome users in the country, warning of several vulnerabilities in the web browser that could allow remote attackers to bypass the security and disclose information on the targeted systems. The alert was issued on October 30, 2025. The warning details the problems that the users could face and specifies which Google Chrome users should be concerned about the security threats.
It also stated that the target audience for the alert includes all end-user organisations and the individuals using Google Chrome for the desktop. According to the CERT-In, multiple vulnerabilities have been reported in Google Chrome that could enable remote attackers to execute arbitrary code, bypass security restrictions, perform spoofing attacks, or disclose sensitive information on the targeted system. It has been stated that there is a high risk of remote code execution, privilege escalation, or unauthorised access to sensitive data.
This alert has stated some notes that is, “Multiple vulnerabilities exist in Google Chrome due to Type Confusion in V8, inappropriate implementation in V8, Extensions, App-Bound Encryption, and Autofill, object lifecycle issue in Media, race in the V8 and Storage, incorrect security UI in Omnibox, Fullscreen UI, and SplitView, policy bypass in Extensions, use after free in PageInfo and Ozone, and out of bounds read in V8 and WebXR.” Chrome users on Linux, Windows, and macOS have been warned about the following different versions of the browser:
- Google Chrome versions to 142.0.7444.59 for Linux
- Google Chrome versions to 142.0.7444.59/60 for the Windows and Mac
- Google Chrome versions to 142.0.7444.60 for Mac
