Government has a 'high severity warning' for these Google Chrome, Mozilla Firefox users - Times of India

Original source (on modern site) | Article images: [1]

The Computer Emergency Response Team (

CERT-in

) has issued a warning for users of

Google Chrome

and

Mozilla Firefox

browsers. The government's cybersecurity watchdog has spotted vulnerabilities in some versions of the web browsers and classified them of 'high severity'.

Warning on Google Chrome for desktop

The first warning comes for users of Google Chrome for desktop.

Cert-In found multiple vulnerabilities in:

• Google Chrome version prior to 124.0.6367.60/.61 for Windows and Mac
• Google Chrome version prior to 124.0.6367.60 for Linux

As per the agency, these vulnerabilities may allow a

remote attacker

to execute arbitrary code and cause Denial of Service (DoS) attack on the targeted system by persuading a victim to visit a specially crafted webpage.

"These vulnerabilities exist in Google Chrome due to Object corruption in V8 and WebAssembly; Use after free in V8, Downloads and QUIC; Inappropriate implementation in Autofill, Extension, Network and Prompts; Out of bounds read in Fonts; Insufficient policy enforcement in Site isolation and WebUI; Insufficient data validation in Browser Switcher and Downloads," it added.

Warning on Mozilla Firefox products

A similar warning was also issued for those who prefer using Mozilla Firefox web browser. Users can check the version of their browser for vulnerability, which are found in:

• Mozilla Firefox versions prior to 125
• Mozilla Firefox ESR versions prior to 115.10

Cert-In said that the multiple vulnerabilities reported in Mozilla products could allow a remote attacker to perform remote code execution, bypass security restrictions and cause a denial of service attack on the targeted system.

What users must do

Those using the affected version of Google Chrome for desktop and Mozilla Firefox web browsers must update the software with the latest patch provided by the vendor.