CERT-In Alerts Users About Vulnerabilities in Chrome and ChromeOS
India’s cybersecurity watchdog, CERT-In, has sounded the alarm on critical vulnerabilities affecting Google Chrome and ChromeOS. This warning, which targets users on Mac, Windows, and Chromebooks, urges immediate updates to prevent potential data breaches and system compromises. Here’s what you need to know and how you can safeguard your devices.
Chrome Vulnerabilities for Mac Users: What You Need to Know
CERT-In has flagged two critical flaws impacting Google Chrome versions earlier than 132.0.6834.83/8r on Mac devices. These vulnerabilities, identified as CIVN-2025-0007 and CIVN-2025-0008, are particularly dangerous because they could allow attackers to execute arbitrary code, crash the browser (leading to denial of service), or bypass security protocols.
The vulnerabilities are linked to improper data validation in extensions and issues with out-of-bounds memory access. These weaknesses could let cybercriminals gain unauthorized access to a device, steal sensitive information, or disrupt system functions.
So, if you’re a Mac user with an older version of Chrome, it’s crucial to update immediately. Failure to do so might leave your system exposed to potentially devastating consequences.
Windows Users Are Not Safe Either
The warning isn’t limited to Mac users. CERT-In has also flagged vulnerabilities in Google Chrome on Windows systems. The issues share similar risks: arbitrary code execution, service disruptions, and bypassing of security protocols. While CERT-In did not provide specific vulnerability identifiers for Windows, it is clear that any outdated versions of Chrome are at risk.
Windows users should take the same precautions as Mac users. The update procedure is straightforward but critical. Cybersecurity experts strongly recommend that users check their current Chrome version and apply the necessary updates.
Key Risk Factors for Windows Chrome Users:
- Arbitrary code execution: Potential for attackers to execute harmful commands on your device.
- Denial of service (DoS): An attacker could crash the browser or cause it to behave unpredictably.
- Bypassing security measures: Attackers could bypass Chrome’s security checks, making it easier for them to install malicious software.
If you’re on a Windows PC, act now. Don’t wait for the worst-case scenario to unfold.
What About Chromebooks? They’re at Risk Too
It’s not just Macs and Windows systems that are affected. CERT-In has also issued a warning for Chromebook users. Like the vulnerabilities in Chrome on Mac and Windows, issues with ChromeOS could lead to similar risks—unauthorized access, data loss, or system crashes. Chromebook users are urged to update both Chrome and ChromeOS as soon as possible.
Given the growing reliance on Chromebooks for education and remote work, this warning affects millions of users. Keeping your system up-to-date will minimize the potential for exploitation.
Chromebook Security Update Tips:
- Ensure automatic updates are enabled: ChromeOS typically handles updates automatically, but double-check that this feature is active on your device.
- Manual updates: If automatic updates are turned off for any reason, check for available updates manually. Go to Settings > About ChromeOS > Check for Updates.
- Reboot your device after updates: This ensures all security patches are correctly applied.
Remember, vulnerabilities like these are not just technical issues—they pose real threats to your privacy and security. Don’t put your data at risk by delaying updates.
How to Update Google Chrome and ChromeOS
Updating Google Chrome and ChromeOS is simple but crucial. If you’re unsure whether you’ve done it correctly, here are the steps for each system:
For Chrome on Mac and Windows:
- Open Google Chrome.
- Click on the three dots in the upper-right corner.
- Go to Help > About Google Chrome.
- Chrome will automatically check for updates. If an update is available, it will begin downloading.
- Once the update is finished, click Relaunch to apply the changes.
For ChromeOS (Chromebooks):
- Click on the system tray in the lower-right corner.
- Select Settings.
- In the Settings menu, scroll down and click About ChromeOS.
- Click Check for updates.
- If an update is available, it will begin installing automatically. After the update is complete, restart your Chromebook.
Why Immediate Action is Critical
The vulnerabilities flagged by CERT-In are not just theoretical risks—they represent an immediate threat to users. Exploiting these flaws could lead to significant breaches of personal and organizational data. With cyber threats becoming more sophisticated, waiting to update could mean putting sensitive information, passwords, and files in jeopardy.
Experts have long warned that most successful cyberattacks occur because users delay installing security updates. In this case, delaying the update could give hackers the window they need to infiltrate your system.
Bottom Line: Don’t Wait, Update Now
If you use Chrome on Mac, Windows, or a Chromebook, take this warning seriously. Cybercriminals are always on the lookout for vulnerabilities to exploit, and with so many people relying on Chrome for daily tasks, it’s a prime target. Updating your system is a small effort compared to the potential fallout from a data breach or system compromise.
