Indian government’s ‘high risk’ warning for Google users, you maybe under attack

Indian government has issued a high severity warning for users of Google Chrome version prior to 119.0.6045.123 for Windows, Mac and Linux users. The Indian Computer Emergency Response Team (CERT-In) under the Ministry of Electronics and Information Technology has revealed that a vulnerability has been reported in Google browser which can allow remote attackers to cause you harm. The vulnerability can be exploited by a remote attacker to execute arbitrary code, gain elevated privileges or cause denial of service conditions on the targeted system. As most of the day-to-day things are now done online, we often store and share a lot of our personal information including location, banking details and others via our browser. The vulnerability is a serious concern for Google Chrome users.

As per the warning, the vulnerability exists in Google Chrome due to use-after-free flaw in the Web Audio component. An attacker could exploit this vulnerability by persuading a victim to visit a specially crafted website. Google rolls out updates for its browser from time to time to keep the users updated, however many users don’t update the app often due to lack of data, storage or ease of use. Such devices with older versions of the app are easy to exploit due to the exposed vulnerabilities. 

Successful exploitation of these vulnerabilities could allow a remote attacker to execute arbitrary code and cause denial of Service (DoS) condition on the targeted system. To avoid any swindling, users should apply appropriate patches as mentioned by Google.