Attention Android users! Govt issues ‘High risk’ warning for these versions, Google Chrome, check if your smartphone is…

Government has issued a high risk warning for these android users, check how you can save yourself from potential cyber attack.

The Indian government has issued an urgent alert concerning high-risk vulnerabilities in Google Chrome and Android and urged the users to update their systems immediately to prevent cyber threats. According to the Indian Computer Emergency Response Team (CERT-In), these vulnerabilities could allow hackers to take control of users’ devices, potentially leading to severe security breaches.

CERT-In Advisory Android & Chrome 

In two recent advisories (CIVN-2024-0319 and CIVN-2024-0318), CERT-In highlighted multiple high-severity vulnerabilities in Google Chrome and Android operating systems. These vulnerabilities can expose millions of devices to cyberattacks, enabling cybercriminals to execute arbitrary code and gain control over affected systems.

Threat To These Android Versions

CERT-In also highlighted several vulnerabilities in Android, which affect critical components like the Framework, System, and subcomponents from MediaTek and Qualcomm. These issues exist across multiple versions of Android, including:

• Android 12
• Android 12L
• Android 13
• Android 14
• Android 15

Successful exploitation of these vulnerabilities could allow attackers to execute code with elevated privileges, steal sensitive information, and compromise user privacy.

Threat To Google Chrome 

In the case of Google Chrome, CERT-In warns of several vulnerabilities, including:

• Integer Overflow in the Layout Feature
• Inappropriate Implementation in the V8 JavaScript Engine
• Type Confusion in V8

These vulnerabilities can be exploited through malicious websites, with attackers tricking victims into visiting specially crafted web pages. Once executed, attackers can gain unauthorized access to the system, steal sensitive data, and install malware.

What Users Can Do ?

Update Google Chrome

Google has already released patches to address the vulnerabilities in Chrome. To protect your device:

• Ensure that you are running the latest version of Chrome. The current stable version is 129.0.6668.100 for Windows and Mac, and 129.0.6668.89 for Linux.
• Go to the “About” section in Chrome to check for updates and install the latest version.

Update Android Devices

Google has also started rolling out security patches for the affected versions of Android as part of its regular security bulletins. To safeguard your Android device:

• Regularly check for system updates by going to the “Settings” section of your device.
• Install any available updates to ensure your device is protected against potential attacks.

CERT-In advises all users to apply security updates as soon as they are released to mitigate the risk of cyberattacks.