CERT-In Flags High-Severity Vulnerabilities in Google Chrome; Urges Immediate Update

CERT-In has issued a high-risk alert regarding several security flaws found in Google Chrome. Hackers can exploit these bugs to remotely execute code and take control of the system. Windows, macOS, and Linux users are advised to immediately update their Chrome browsers to the latest version to protect against any attacks.

Sun, 23 Nov 2025 12:25 AM (IST)
 0
CERT-In Flags High-Severity Vulnerabilities in Google Chrome; Urges Immediate Update
CERT-In Flags High-Severity Vulnerabilities in Google Chrome; Urges Immediate Update

The Indian CERT-In has issued a new advisory about multiple vulnerabilities in Google Chrome. In the advisory released on Friday, the vulnerabilities have been rated as 'High'. The cybersecurity agency has warned that the threat actors can use these bugs to remotely execute arbitrary code and gain control of the system. It is recommended that all users and organizations using Google Chrome on Windows, macOS, and Linux update their browser to its latest version.

In advisory CIVN-2025-0330, the cybersecurity agency in question pointed out two vulnerabilities in the versions of Google Chrome for Windows, macOS, and Linux. These are designated CVE-2025-13223 and CVE-2025-13224, both with a "high" severity rating. According to the agency itself, these bugs could cause system damage and service disruption.

According to the agency, these flaws could allow a remote attacker to run arbitrary code on an unprotected system. This occurs due to type confusion, a situation in which a piece of code attempts to access a resource using a data type that is incompatible with the object's actual type.

CERT-In stated that the type confusion occurred in V8, the engine responsible for executing JavaScript and WebAssembly code in Chrome. This allows a remote attacker to exploit heap corruption via a crafted HTML page.

Advertisement

Want to get your story featured as above? click here!

Advertisement

Want to get your story featured as above? click here!

In a statement, Google clarified that it was aware of an exploit for CVE-2025-13223. Google Chrome versions prior to 142.0.7444.175/.176 for Windows, 142.0.7444.176 for Mac, and 142.0.7444.175 for Linux are affected by these vulnerabilities.

The Mountain View-based tech company said it has updated the stable channel for all operating systems, and updates with the necessary fixes will be rolled out in the coming days and weeks.

To mitigate the risk, CERT-In recommends updating Google Chrome to version 142.0.7444.175/.176. Users can verify and install updates by going to Help > About Google Chrome in their browser settings. Chrome will automatically download and install the latest patches.

Muskan Kumawat Journalist & Writer