The Indian Computer Emergency Response Team (CERT-In) under the Ministry of Electronics and Information Technology (Meity) has issued a warning to Google Chrome browser users. The warning is for the Chrome users who are on the version prior to 99.0.4844.74. In a notification, the CERT-In said that multiple vulnerabilities have been reported in Google Chrome browser, "which could allow a remote attacker to execute arbitrary code, bypass security restrictions or cause a denial of service condition on the targeted system".
On where all the vulnerability and security threat lay, the nodal body said, "Use after free in Blink Layout, Extensions, Safe Browsing, Splitscreen, ANGLE, New Tab Page, Browser UI and Heap buffer overflow in GPU". The notification by CERT-In further informed that the exploitation of these vulnerabilities could allow a remote attacker to execute arbitrary code, bypass security restrictions, or cause a denial of service condition on the targeted system.
In order to prevent cyber attack, the agency recommended users to upgrade to Google Chrome version 99.0.4844.74.
Recently CERT-In also informed that multiple vulnerabilities have been reported in various Microsoft products too. These could be exploited by an attacker to access sensitive information, bypass security restrictions, perform denial of service (DoS) attack, escalating privileges, perform spoofing attacks or executing arbitrary codes on the targeted system.
The software that were affected include Windows, Microsoft Office, Microsoft defender, Microsoft Exchange Server, Browser, Developer Tools, among others.
Read more on tech.hindustantimes.com