Indian Govt Alerts on Data Theft Risk in Chrome, Edge Browse

A warning has been issued by the Indian Computer Emergency Response Team (CERT-In) regarding a vulnerability in the Microsoft Edge and Google Chrome browsers that may allow users' private information to be stolen. CERT-In discovered many serious browser vulnerabilities that can enable hackers to obtain users' private information. The vulnerability may be "exploited by an attacker to obtain sensitive information, gain elevated privileges, and execute arbitrary code on the target system," according to the CERT-In website.

Vulnerability notes CIVN-2023-0361 and CIVN-2023-0362 for Google Chrome for Desktop and Microsoft Edge, respectively, contain more information on the alert.

CERT-In categorized The problems as high-severity issues, which suggests applying a security upgrade right away. According to the warning, there is a security risk if you use Google Chrome versions earlier than v120.0.6099.62 on Linux and Mac, or earlier than 120.0.6099.62/.63 on Windows. Similarly, the vulnerability may also impact users of Microsoft Edge browser versions earlier than 120.0.2210.61.

According to the CERT-In vulnerability note, "Use after free in Media Stream, Side Panel Search, and Media Capture; Inappropriate implementation in Autofill and Web Browser UI" is the primary source of this flaw. This implies that by delivering users of the susceptible browsers specially designed requests, attackers can take advantage of these flaws.

Once an exploit is successfully carried out, hackers can take control of the targeted machine, execute code, and obtain access to private information. Users' privacy and security are seriously threatened by this.

To guard against these vulnerabilities, users must constantly update their software and have a cautious mindset. Through the implementation of security measures that are prioritized and ongoing awareness of possible risks, users can reduce their vulnerability to cyberattacks.

IMAGE SOURCE-X