Government has a warning for Google Chrome users: Details inside

livemint.com:

Google Chrome users. This government agency operates under the Ministry of Electronics and Information Technology. In a recent advisory, CERT-In highlighted critical vulnerabilities within Google Chrome, prompting an urgent call for users to promptly update their web browsers.

CERT-In's warning notes that "Multiple vulnerabilities have been reported in Google Chrome which could be exploited by an attacker to bypass security restrictions, execute arbitrary code, disclose sensitive information, and cause denial of Service (DoS) conditions on the targeted system." These vulnerabilities present a significant risk to user data and the security of systems. The vulnerabilities identified by CERT-In affect users who are using Google Chrome versions prior to 116.0.5845.96/.97 for Windows and Google Chrome versions prior to 116.0.5845.96 for Mac and Linux. Users using these versions are particularly vulnerable to potential exploitation of these security flaws.

The government body explains that these vulnerabilities exist due to issues like "use after free" in areas such as offline mode, device interactions, network communications, audio functions, DNS, and extensions. There are also problems with implementation in features like fullscreen mode, app launchers, color management, autofill, web sharing, and permission prompts. Additionally, there are concerns with type confusion and out-of-bounds memory access in the V8 engine, along with heap buffer overflow in components like ANGLE, Skia, and Mojom IDL.