Somewhere in the quiet machinery of the modern day, a browser that carries billions of people into their daily lives has been found to hold cracks that a determined stranger could pry open. India's national cyber agency, CERT-In, has stepped forward to say so, and it asks that the remedy be taken up without delay: a few clicks through the browser's own menu, where Google has already placed the mending. The warning is less a story about one software product than a reminder of how much of human life now rests on a shared foundation that must be kept current, and how the distance between a fix ex
CERT-In Urges Immediate Chrome Update to Patch Code-Execution and DoS Flaws
The fix is a few clicks away.
Mark
Why is a government agency issuing a warning about a browser update?
Mimi
CERT-In is India's national cyber response team. It flagged multiple high-risk flaws in Chrome that could allow arbitrary code execution or denial-of-service attacks, and it told people to update right away.
Mark
What does arbitrary code execution actually mean for an ordinary user?
Mimi
It means an attacker could run their own instructions on a device. Denial of service is different: it aims to knock the software out of working normally.
Luke
Worth saying what we don't know. The report says the flaws could allow those attacks if unpatched. It doesn't say anyone has actually been attacked.
Mark
So there's no confirmed exploitation?
Luke
Not in this reporting. It's silent on that, and it doesn't list the individual flaws either.
Mimi
What is specific is the fix: 151.0.7922.137 or .138 on Windows and Mac, and .137 on Linux.
Mark
And the 3.6 billion figure?
Luke
That's the stated size of Chrome's active user base. It shows the potential reach, not how many people are actually exposed right now.
Mimi
Exposure depends on who has updated. Checking Help, then About Google Chrome, does it.
Mark
What about the Gemini Spark mention?
Luke
It's a separate announcement in the same piece. Nothing here connects it to the vulnerabilities.
The Pulse
- A national cyber agency has flagged several high-risk flaws in Google Chrome, and the alarm is spreading to anyone who opens the browser each day.
- The flaws could let an attacker run code of their own choosing on a device or knock the browser out of working order, a prospect that turns a routine tool into a possible point of intrusion.
- Google has already released patched builds, 151.0.7922.137 and .138 for Windows and macOS and 151.0.7922.137 for Linux, so the path to safety is now a matter of checking and installing.
- The advisory urges users to open Help, then About Google Chrome, and confirm the version, since automatic updates can lag for people who rarely close their browser.
- With roughly 3.6 billion users, the outcome depends on how many people actually complete the update, and the unpatched remainder will stay exposed for as long as they wait.
Somewhere in the quiet machinery of the modern day, a browser that carries billions of people into their daily lives has been found to hold cracks that a determined stranger could pry open. India's national cyber agency, CERT-In, has stepped forward to say so, and it asks that the remedy be taken up without delay: a few clicks through the browser's own menu, where Google has already placed the mending. The warning is less a story about one software product than a reminder of how much of human life now rests on a shared foundation that must be kept current, and how the distance between a fix existing and a fix being installed is where the real exposure lives.
The fix is a few clicks away, and India's national cyber agency wants people to take it now. The Indian Computer Emergency Response Team, known as CERT-In, has warned that several serious vulnerabilities in Google Chrome could allow an attacker to execute arbitrary code or carry out denial-of-service attacks against unpatched browsers. The reporting describes the flaws as high-risk and advises users to update immediately.
The two threats differ. Arbitrary code execution would let an attacker run instructions of their choosing on a device, while a denial-of-service attack aims to disable the browser so it cannot work properly. The coverage does not list the individual flaws or say whether any have already been exploited.
Google has released fixes: version 151.0.7922.137 or .138 on Windows and macOS, and 151.0.7922.137 on Linux. Anyone on an earlier build remains exposed. Chrome's reach, with around 3.6 billion users, makes such a flaw a large target, and how many people install the update will determine how much of that base stays at risk. Users who seldom close their browser may run an old version for some time, which is why the manual check through the About menu is being emphasised.
The same report mentions Gemini Spark, a new AI agent inside Chrome, but does not connect it to the vulnerabilities. For now, the practical step is to confirm that Chrome shows 151.0.7922.137 or later and to relaunch the browser if an update is waiting.
The fix is a few clicks away. Open Chrome, go to the menu, choose Help, then About Google Chrome, and the browser checks for the latest build and installs it. That is the instruction India's national cyber agency is now pressing on Chrome users, after it flagged a set of serious security flaws in the browser.
The agency is the Indian Computer Emergency Response Team, known as CERT-In. It warned that multiple vulnerabilities in Google Chrome could let an attacker execute arbitrary code, or carry out denial-of-service attacks, if the browser is left unpatched. It advised users to update immediately. The reporting describes the vulnerabilities as high-risk.
The two risks are different in kind. Arbitrary code execution means an attacker could run instructions of their own choosing on a device. A denial-of-service attack aims instead to disrupt the software so it cannot function normally. The coverage does not list individual flaws or say how each one works, and it does not say whether any have been exploited in the wild.
Google has already released fixes. The patched versions are 151.0.7922.137 or .138 for Windows and macOS, and 151.0.7922.137 for Linux. Updates have been rolled out across all three desktop platforms. Anyone running an earlier build remains exposed to the flaws CERT-In described.
The scale is why such advisories matter. Chrome has an active user base of about 3.6 billion people. A flaw in a browser used that widely is a large target, and how many people actually install the update will determine how much of that base stays vulnerable. Automatic updating helps, but users who rarely close their browser can run an old version for some time, which is why the manual check through the About menu is being highlighted.
The same coverage notes a separate development: Google has introduced Gemini Spark, an AI agent inside Chrome that can carry out complex tasks under a user's direction. It is mentioned alongside the security warning but is not linked to the vulnerabilities in the reporting.
For now, the practical step is simple. Check that your Chrome reads 151.0.7922.137 or later, and relaunch the browser if the update is waiting. The details of the flaws themselves, including their technical specifics, are what to look for in Google's own release notes and any further CERT-In guidance.
Notable Quotes
Unpatched Chrome flaws could allow arbitrary code execution or denial-of-service attacks, and users should update immediately.— CERT-In advisory, as reported by Deccan Herald
Want the full story?
Read the original at Deccan Herald ↗
Technology