If you use Google Chrome, you must note that the Indian government’s Computer Emergency Response Team (CERT-IN) has warned users about ‘high’ risk vulnerabilities that must be addressed as soon as possible by updating your browser.
Failure to update your software may expose you to a range of security threats. Outdated software can be exploited by hackers, leading to unauthorized access to your system, data theft, or the installation of malware.
Who Is Affected
CVE-2023-5997 and CVE-2023-6112 vulnerabilities have been identified in the following versions of Chrome:
- Google Chrome versions prior to 119.0.6045.159 for Linux and Mac
- Google Chrome versions prior to 119.0.6045.159/.160 for Windows
This means all users of Google Chrome—be it Windows, Mac, or Linux—are affected.
Why Are These Dangerous?
If a remote attacker successfully executes an attack through these exploits, they could allow them to execute “arbitrary code” on the targeted system.
Furthermore, these vulnerabilities exist due to a use-after-free flaw in Garbage Collection and Navigation. A real-world scenario exploiting these would be to lead unsuspecting users to a specifically designed website, likely through phishing, and then things get sour.
If you are using any of the aforementioned Google Chrome versions, it is in your best interest to update to the latest version of Chrome as soon as possible. You can visit here for more about the software version.
With that said, CERT-In had also recently warned users about multiple vulnerabilities in Mozilla Firefox browser as well. It affects Firefox ESR versions before 115.5.0, Firefox iOS versions before 120, and Mozilla Thunderbird version before 115.5. Ergo, if you are still using any of these versions, be sure to update to the latest available version to safeguard yourself against bad actors.
Comments
0 comment