The Indian Government’s primary cybersecurity watchdog, CERT-In (Indian Computer Emergency Response Team), has issued an urgent, high-severity warning for anyone using Google Chrome on a desktop or laptop.
According to the central cybersecurity directive, multiple severe vulnerabilities have been discovered inside the world's most popular web browser. If left unpatched, these flaws grant malicious hackers a backdoor to infiltrate your system, bypass critical security blocks, execute rogue software, and harvest sensitive personal data.
The threat is active across Windows, Mac, and Linux platforms. Here is a breakdown of the specific targets and how to defend your system instantly.
1. The Threat Mechanics: How the Vulnerability Works
The security holes discovered by government researchers do not require complex hacking attempts to compromise your hardware. They are hidden directly within daily browser engine components, including WebRTC (used for video/audio calls), the GPU rendering engine, QUIC protocol handlers, and XR (Virtual Reality framework) modules.
The Attack Vector
-
The Trap: A hacker creates a compromised website or hides a malicious script inside an innocent-looking link.
-
The Exploit: The moment an unprotected Chrome user visits that link, the script takes advantage of the browser's hidden flaws.
-
The Damage: The remote attacker can bypass the system's defensive restrictions, inject dangerous malware, trigger sudden device crashes, or cause total denial-of-service (DoS) system lockouts.
2. Check Your Build: Is Your Device Vulnerable?
The government advisory specifically flags older desktop versions of the browser as high-risk targets. Check your system against the official vulnerability thresholds:
| Operating System | Vulnerable Versions at Risk | Safe & Secure Target Version |
| Windows & macOS | Versions older than 148.0.7778.178 or .179 | Update to version 148.0.7778.179 or higher |
| Linux Ecosystem | Versions older than 148.0.7778.178 | Update to version 148.0.7778.178 or higher |
3. The Good News: A Fix Is Already Available
CERT-In emphasizes that individual everyday users and corporate IT departments face identical exposure under this sweep. Fortunately, Google has acknowledged the flaws and rolled out an emergency security patch to neutralize the exploits.
The Government Directive: Do not delay this update. Cyber experts confirm that installing the official patch is the absolute easiest and strongest shield available to block remote execution attacks.
Action Plan: Secure Your Google Chrome Immediately
Because Chrome processes updates in the background, many users assume they are automatically safe. However, the patch cannot fully deploy until the software restarts. Follow these rapid steps to force the security update right now:
