CERT-In Warns Google Chrome Users of High-Severity Remote Code Execution Vulnerability

The Indian Computer Emergency Response Team (CERT-In) has issued a high-severity warning for a remote code execution vulnerability affecting Google Chrome for desktop computers. The flaw allows an attacker to run arbitrary code on a user's system, potentially leading to full system compromise or service disruption. The vulnerability impacts Google Chrome 141.0.7390.122/.123 and older versions on Windows and macOS, and Google Chrome 141.0.7390.122 and older on Linux computers. The company has rolled out a fix with its latest stable Google Chrome releases.

CERT-In Urges Google Chrome Users to Update Browser to Latest Version

In a fresh vulnerability note (CIVN-2025-0274) issued on October 22, CERT-In warns users about a remote code execution flaw impacting unpatched versions of Google Chrome for desktop. The vulnerability could let attackers execute code on a user's system, potentially causing full system takeover or service disruption. Chrome versions earlier than 141.0.7390.122/.123 on Windows and macOS, and 141.0.7390.122 on Linux are affected.

According to the advisory, the issue arises from an inappropriate implementation in Chrome's V8 engine, which is a core component responsible for executing JavaScript code. A remote attacker could exploit this weakness by sending specially crafted web requests that trigger unintended program behaviour.

If successfully exploited, the vulnerability could allow an attacker to execute arbitrary code with the same privileges as the logged-in user, resulting in a complete system takeover, data theft, or disruption of essential services.

CERT-In has advised all end users and organisations to update to the latest version of Chrome immediately to reduce exposure to potential attacks. Google confirmed that the fix is part of its Stable Channel Update for Desktop released on October 21, 2025, which will roll out gradually over the coming days and weeks. The updated build versions are 141.0.7390.122/.123 for Windows and macOS, and 141.0.7390.122 for Linux.

Users can check for updates manually by navigating to Help > About Google Chrome in the browser settings. CERT-In recommends applying updates promptly and enabling automatic updates to stay protected against emerging security risks. The agency also advises monitoring official Chrome security advisories for future patches addressing similar high-risk vulnerabilities.