(DailyEmailNews.com) – Google is once again urging users to update its Chrome browsers due to “critical security fixes” for high-risk vulnerabilities.
The Indian Computer Emergency Response Team (CERT-In) recently sounded the alarm about several security flaws in Google Chrome for Desktop.
These vulnerabilities have been rated HIGH in severity for putting users’ personal information at risk.
Specifically, they could allow hackers to execute codes or Denial of Service (DoS) attacks remotely.
The affected versions include Windows and macOS versions older than 131.0.6778.139/.140 and Linux versions before 131.0.6778.139.
Currently, Google claims to have released updates to address these vulnerabilities.
However, the timing and frequency of these security patches raise questions about the Chrome browser’s overall stability and security.
One of the critical vulnerabilities, identified as CVE-2024-12381, involves a Type Confusion in V8.
Meanwhile, vulnerability CVE-2024-12382 is described as a Use After Free in Translate.
These technical-sounding issues could allow malicious actors to execute code, crash the browser or steal sensitive data from unsuspecting users.
Google credited external researchers for discovering these vulnerabilities and awarded them bounties totaling $75,000.
However, critics question why Google’s security teams did not catch these issues earlier.
To update Chrome, users need to access the “Help|About” menu and restart the browser after the update is complete.
However, this process requires users to close all open tabs, which could potentially disrupt work or cause the loss of important information.
While Google claims to update Chrome automatically, the fact that users must manually restart the browser to activate the protection is concerning.
Copyright 2024, DailyEmailNews.com
