Your Google Chrome, Firefox browsers could be at risk! CERT-In urges immediate updates

India's cybersecurity agency CERT-In has flagged multiple high-severity vulnerabilities in widely used Google Chrome and Mozilla Firefox web browsers, warning users of potential cyberattacks that could lead to system compromise, data breaches, and denial of service.

In two separate vulnerability notes issued on June 6, the Indian Computer Emergency Response Team (CERT-In) detailed serious flaws affecting Google Chrome versions prior to 137.0.7151.55 on Linux and versions prior to 137.0.7151.55/56 on Windows and macOS, as well as Mozilla Firefox, Firefox ESR, and Thunderbird versions prior to 139 and 128.11, respectively.

“Multiple Vulnerabilities have been reported in Google Chrome which could allow a remote attacker to execute arbitrary code and cause of denial of service (DoS) on the targeted system,” CERT-In said.

The agency warned that a remote attacker could lure victims into visiting specially crafted web pages to exploit these flaws, leading to crashes or even full system compromise.

“Successful exploitation of these vulnerability could allow a remote attacker to execute arbitrary code and cause of denial of service (DoS) on the targeted system,” it added.

It advised all users and organisations to immediately apply the latest updates provided by Google.

CERT-In also revealed that multiple vulnerabilities in Mozilla Firefox and Thunderbird could result in memory corruption, disclosure of sensitive information, arbitrary code execution, content injection, and clickjacking attacks.

“Multiple vulnerabilities exist in Mozilla products due to memory corruption issues, improper cross-origin isolation, inadequate input sanitisation, encryption and privacy misconfigurations and security policy bypass issues,” it said.

Attackers could exploit the flaws through malicious web requests, posing a high risk of unauthorised data access.

CERT-In has categorised both sets of vulnerabilities as "high" in severity and urged users to install the relevant security patches without delay.