CERT-In Warns Google Chrome Users of ‘High Risk’ Vulnerabilities on Windows, macOS, and Linux

The vulnerabilties may allow a remote attacker to execute arbitrary code on an unprotected computer.

Advertisement
Written by Shaurya Tomer, Edited by Ketan Pratap | Updated: 21 November 2025 15:21 IST
Highlights
  • Two vulnerabilities, CVE-2025-13223 and CVE-2025-13224, were flagged
  • The flaws may let attackers remotely run arbitrary code on systems
  • Chrome versions before 142.0.7444.175/176 are affected

Desktop Chrome users should update to the latest version that patches the flaws

Photo Credit: Unsplash/Firmbee

The Indian Computer Emergency Response Team (CERT-In) has issued an advisory regarding multiple vulnerabilities affecting Google Chrome on various operating systems. The latest bulletin, published on Friday, has flagged the discovered vulnerabilities as high risk. As per the cybersecurity firm, threat actors may potentially exploit the security flaws to remotely execute arbitrary code on the affected systems. All individual users and organisations using Google Chrome on Windows, macOS, and Linux have been advised to update to the latest version of the web browser.

CERT-In Issues Warning for Google Chrome Users

In the advisory note, CIVN-2025-0330, the cybersecurity agency highlighted two different vulnerabilities in Google Chrome for Windows, macOS, and Linux. These have been assigned the identifiers CVE-2025-13223 and CVE-2025-13224, and their severity has been declared as “high”. The vulnerabilities are claimed to have the potential to compromise the system and disrupt services.

Advertisement

As per the cybersecurity agency, the flaws may allow a remote attacker to execute arbitrary code on an unprotected computer. It occurs due to Type Confusion, a scenario where a piece of code attempts to access a resource using a data type that is incompatible with the object's actual type.

CERT-In said that the Type Confusion occurred in V8, which is the engine responsible for executing JavaScript and WebAssembly code within Chrome. It would allow the remote attacker to potentially exploit heap corruption via a crafted HTML page.

Advertisement

In a statement, Google clarified it was aware that an exploit for CVE-2025-13223 exists in the wild. Google Chrome versions prior to 142.0.7444. 175/.176 for Windows, 142.0.7444.176 for Mac, and 142.0.7444. 175 for Linux are impacted by the vulnerabilities.

The Mountain View-based tech giant said that it has updated the stable channel for all of the operating systems, and updates with the required fixes will be rolled out over the coming days and weeks.

Advertisement

To mitigate risks, CERT-In recommends updating Google Chrome to version 142.0.7444. 175/.176. Users can verify and install updates by navigating to the browser's menu and selecting Help > About Google Chrome. The update process will automatically download and apply the latest patches.

 

Get your daily dose of tech news, reviews, and insights, in under 80 characters on Gadgets 360 Turbo. Connect with fellow tech lovers on our Forum. Follow us on X, Facebook, WhatsApp, Threads and Google News for instant updates. Catch all the action on our YouTube channel.

Advertisement

Related Stories

Popular Mobile Brands
  1. Best Earbuds Under Rs 7,000 to Buy During Amazon, Flipkart Sale
  2. Xiaomi Power Bank 20000 165W Review: One Brick to Charge It All
  1. Redmi 17C vs Poco M8x vs OnePlus N6x: Price in India, Specifications Compared
  2. Nothing Deals Revealed for Phone 4 Series, CMF Buds Lineup, More Ahead of Flipkart's Big Billion Days Sale
  3. F1 25, Hunt: Showdown 1896 and Earth Defense Force: World Brothers 2 Join PS Plus in October
  4. Samsung Galaxy A08 Launched in India With MediaTek Helio G99+ SoC, 6,000mAh Battery: Price, Features
  5. Samsung Galaxy Buds On Unveiled With Clip-On Design, Up to 9.5 Hours of Battery Life: Price, Features
  6. OnePlus Nord Buds 3r Gets Jade Mist Colour Variant in India: Price, Specifications
  7. Crypto Hack Losses Reach $768 Million in September, Marking 2026’s Worst Month
  8. Nike Apex Racing Shoe Launched With Double-Stacked Air Zoom Platform, Carbon Fibre Flyplate
  9. India Sees Stronger Centralised Crypto Exchange Inflows Than Singapore, Australia
  10. Google Announces Gemini 4 Argon With Longer Output Limit: See Features, Availability
Download Our Apps
Available in Hindi
© Copyright Red Pixels Ventures Limited 2026. All rights reserved.