CERT-In flags critical Google Chrome vulnerabilities; Google releases security update, users urged to...

CERT-In, India’s cybersecurity agency, flagged serious vulnerabilities in Google Chrome. Google responded by releasing a security update. The warning matters because vulnerable browser software can expose users to attacks when they visit unsafe pages or open harmful content. Installing the update reduces that known risk.

The update addresses 37 security vulnerabilities. Seven are described as critical, the highest-risk group mentioned in the reports. Separate coverage also links the flaws with possible memory corruption and code execution attacks. Those mechanisms can allow harmful activity inside or beyond the browser’s normal protections.

The current action is clear: Chrome users are urged to update. The reports also say Edge was still waiting for its update, showing that fixes may not arrive simultaneously across browsers. Users and organizations should monitor vendor notices and apply security updates promptly when available.

A software vulnerability is a mistake or weakness in a program’s design, code, or safeguards. Attackers may use it to make the program behave in an unintended way. A vulnerability is called critical when its likely impact is severe, exploitation may be practical, or it can threaten many users. The source identifies seven Chrome flaws as critical.

For example, a vulnerable browser component might mishandle information supplied by a webpage. An attacker could use that mistake to corrupt memory or run unwanted instructions. The source reports that multiple Chrome flaws could enable memory corruption and code execution attacks. The exact technical details of each flaw are not provided.

Google’s update fixes 37 vulnerabilities, including seven critical ones. That classification signals urgency, but it does not prove that every user has been attacked. Installing the update closes the known weaknesses and lowers exposure while Google and security teams continue tracking the issue.

Google Chrome’s security update fixes 37 vulnerabilities. Seven of those vulnerabilities were classified as critical. These figures come from coverage of the update after CERT-In flagged critical Chrome issues. The numbers show that the release was broader than a single emergency patch, while still containing a particularly urgent group of flaws.

The critical vulnerabilities are part of the same update as the other 30 fixes. Reports connect multiple Chrome flaws with memory corruption and code execution attacks. However, the supplied article text does not identify every affected browser component, explain the individual severity ratings, or provide a detailed breakdown of the remaining vulnerabilities.

The immediate implication is that Chrome users should install the update rather than address only the seven critical issues. A single browser release can contain many separate fixes. The reports also note that Edge was still waiting for its update, so users should check the correct browser vendor for availability.

If attackers exploit an unpatched vulnerability, they may make Chrome process data in an unsafe way. The reports specifically warn that multiple Google Chrome flaws could enable memory corruption and code execution attacks. Those outcomes can undermine browser security and may put information or device activity at risk. The source does not state that a particular attack has occurred.

A harmful webpage could serve specially crafted content to trigger a vulnerable browser component. Memory corruption may alter data or program instructions. If the attacker then achieves code execution, the browser may perform actions chosen by the attacker instead of its intended task. The exact attack path is not described in the supplied text.

Google has released a fix for the 37 reported vulnerabilities, including seven critical flaws. Users who delay installation remain exposed to weaknesses addressed by that update. Organizations also face management challenges across different browsers, since coverage says Edge was still waiting for its corresponding update.

Memory corruption happens when software reads, writes, or uses memory incorrectly. An attacker may exploit that mistake to change data or instructions. Code execution means causing the affected program to run attacker-chosen commands or code. These are dangerous because a browser handles untrusted web content and often interacts with valuable information.

A crafted webpage could target a vulnerable Chrome component. If the component corrupts memory, the attacker may redirect the program’s behavior. If code execution follows, Chrome could carry out actions the attacker selected. Modern browsers use isolation and other defenses, so the exact degree of control depends on the flaw and the protections involved. The source does not describe one specific exploit.

The reports warn that multiple Chrome flaws could enable both attack types. Google’s update fixes 37 vulnerabilities, including seven critical flaws. Prompt installation helps remove the known entry points, but users should still treat unexpected webpages and downloads cautiously. The supplied article does not confirm exploitation in the wild.

CERT-In is India’s Computer Emergency Response Team. It helps coordinate responses to computer-security incidents and issues warnings about serious digital threats. Its alert matters because Chrome is widely used by people and organizations, and a browser weakness can affect everyday web activity. The source says CERT-In flagged critical Google Chrome vulnerabilities.

After the warning, Google released a Chrome security update. Reports say the update fixes 37 vulnerabilities, including seven critical flaws. They also link multiple Chrome flaws to possible memory corruption and code execution attacks. These mechanisms can let malicious web content influence browser behavior, although the supplied article does not describe a specific incident or affected organization.

For users in India, the warning makes checking Chrome’s update status especially important. Organizations can use it as a prompt to prioritize patching and communicate the risk to staff. Google’s release provides the remedy identified in the reports. Coverage also says Edge was still waiting for its update, so the response differs by browser.

Browsers use isolation to keep a website’s code in a restricted process or environment. This limits what one page can access directly. They also enforce permissions and separate sensitive browser functions. These defenses aim to stop a malicious webpage from reaching the whole computer. They cannot guarantee safety if a browser vulnerability defeats the isolation boundary.

For example, a webpage might send specially crafted content to a vulnerable Chrome component. If that component mishandles the content, memory corruption could occur. A successful code execution attack might then run instructions within the browser process. A further escape would be needed for broader device control, and the supplied article does not describe such an escape.

Browser makers distribute updates to repair known weaknesses. Google released an update fixing 37 Chrome vulnerabilities, including seven critical flaws. Users must install it for the repair to protect them. The reports note that Edge was still waiting for its update, underscoring that browser updates arrive separately and require continued monitoring.