The Indian Computer Emergency Response Team (CERT-In) has identified several vulnerabilities that hackers could exploit to gain control of systems. CERT-In has emphasized these concerns in two recent advisories -- CIVN-2024-0319 and CIVN-2024-0318 -- urging users to take immediate action to reduce the risks.
CERT-In has revealed multiple vulnerabilities in both Android and Google Chrome, which could put millions of devices at risk of cyberattacks. Rated as "high severity," these vulnerabilities may allow cyber attackers to execute arbitrary code, potentially resulting in complete system compromise.
ALSO SEE: WhatsApp Introduces Low-Light Mode For Users For Video Calls; How to Enable The Feature
CERT-In points out that these vulnerabilities affect multiple versions of Android and Chrome, leaving millions of devices and users vulnerable to security breaches. The government's cybersecurity team reports that these vulnerabilities can be exploited in various ways, mainly through malicious websites or applications.
For Google Chrome, the vulnerabilities consist of integer overflow in the Layout feature, improper implementation in the V8 JavaScript engine, and type confusion within V8. If a cyberattacker tricks a victim into visiting a specially designed webpage, they could execute arbitrary code, granting unauthorized access to the system. This would allow the attacker to get their hands on sensitive information or install malware on the compromised device.
The vulnerabilities found in Android similarly impact several critical components, including the Framework, System, and subcomponents from MediaTek and Qualcomm. If these vulnerabilities are successfully exploited, a cyber attacker could execute code with elevated privileges, enabling them to infiltrate the targeted system. Once compromised, attackers can steal sensitive information, violate user privacy, and potentially lock users out of their devices.
Despite the high risk, CERT-In advises users to protect their systems by promptly applying updates as soon as they are released by Google and other relevant Original Equipment Manufacturers (OEMs). Users should install these updates immediately. Here's what you can do:
For Google Chrome users: Ensure your device is running the latest version of the browser. Google has already released patches for the identified vulnerabilities in Chrome. The latest stable versions, as noted in this advisory, are 129.0.6668.100 for Windows and Mac, and 129.0.6668.89 for Linux.
ALSO SEE: Samsung Galaxy Ring Now Available For Pre-Order in India at Rs 1,999: Check Price, Specs, And More