
The Indian Computer Emergency Response Team (CERT-In) has released two new high-severity security advisories affecting users of Google Chrome and Mozilla Firefox browsers. According to the agency, multiple vulnerabilities have been discovered that could allow attackers to execute malicious code, steal sensitive information, or disrupt services on targeted systems. The warnings apply to individual users and organisations that rely on these browsers for daily use. Given how widely both Chrome and Firefox are used in India, CERT-In has urged users to install the latest updates immediately to avoid potential security breaches.Vulnerabilities In Google ChromeThe first advisory focuses on Google Chrome for desktop. CERT-In has flagged multiple critical
vulnerabilities in older versions of the browser, including those prior to 141.0.7390.54 for Linux and versions before 141.0.7390.54/55 for Windows and macOS. The flaws stem from several underlying issues such as heap buffer overflow in WebGPU and Video, side-channel information leakage in Storage and Tab, inappropriate implementations in Media, Drmbox, and Storage, out of bounds reads in Media and certain vulnerabilities in the V8 engine. If exploited, these security holes could allow a remote attacker to execute arbitrary code on the victim’s system, bypass security restrictions, cause denial-of-service conditions, or even disclose private information. All it would take is convincing a user to visit a maliciously crafted website.ALSO READ: Google Issues Warning As Hackers Target Executives With Extortion Emails: All You Need To KnowVulnerabilities In Mozilla FirefoxSimilarly, Mozilla Firefox users have also been put on alert. The advisory covers Firefox versions prior to 143.0.3 and Firefox for iOS versions below 143.1. CERT-In explained that the vulnerabilities in Firefox are caused by improper isolation of cookie storage, an integer overflow in the Graphics Canvas2D component, and JIT miscompilation in the JavaScript Engine. If a victim unknowingly interacts with a malicious web request, attackers could exploit these issues to execute code remotely or gain access to sensitive data stored in the browser.What You Should DoCERT-In has classified both advisories as high-risk and strongly recommends that users update their browsers without delay. Both Google and Mozilla have released the necessary security patches to fix these vulnerabilities, so updating to the latest version is the simplest and most effective way to stay protected. Users can also visit the official CERT-In website to access the detailed vulnerability notes and patch links.