CERT-In Issues High-Risk Warning for Google Chrome: The Indian Computer Emergency Response Team (CERT-In) has released a new high-risk security advisory alerting Google Chrome users about multiple critical vulnerabilities affecting desktop versions of the browser. Published on October 30, 2025, the bulletin warns that these flaws could allow remote attackers to execute malicious code or steal sensitive user data if exploited.
Key Details of the Advisory
According to CERT-In’s report (CIVN-2025-0288), the vulnerabilities impact Chrome versions prior to 142.0.7444.59 on Linux and below 142.0.7444.59/60 on Windows and macOS. The agency stated that attackers could exploit these weaknesses by tricking users into visiting specially crafted websites, leading to system compromise or data theft.
The affected components include:
- V8 JavaScript engine
- Extensions
- Autofill
- Media
- Omnibox
The flaws are associated with issues such as type confusion, use-after-free errors, object lifecycle mismanagement, and policy bypasses, all of which could enable attackers to run arbitrary code or bypass existing security mechanisms.
Severity and Potential Impact
CERT-In has classified the vulnerabilities as “High” severity. Successful exploitation could result in:
- Execution of malicious code on targeted systems
- Spoofing attacks leading to data exposure
- Unauthorized system access
The vulnerabilities are tracked under CVE identifiers ranging from CVE-2025-12429 to CVE-2025-12447.
CERT-In Recommendations
Users and organizations are strongly advised to update Google Chrome to version 142.0.7444.60 or later immediately. To check for updates:
- Open Chrome.
- Go to Menu → Help → About Google Chrome.
- The browser will automatically download and install the latest update.
More details about the fixes can be found on Google’s Stable Channel Update for Desktop page dated October 28, 2025.
Why This Matters
These vulnerabilities could be exploited remotely without user interaction, making them particularly dangerous. By updating promptly, users can prevent attackers from gaining access to private data or executing harmful code through compromised websites.
In summary: If you use Google Chrome on any desktop platform — update now to protect your system from potential exploitation.
Comment on “CERT-In Issues High-Risk Warning for Google Chrome Users: Update Immediately to Stay Protected”