{"id":2714,"date":"2026-10-16T08:34:53","date_gmt":"2026-10-16T08:34:53","guid":{"rendered":"https:\/\/newsraise.com\/in\/2026\/10\/16\/cert-in-alerts-chrome-critical-flaws-patch\/"},"modified":"2026-10-16T08:34:53","modified_gmt":"2026-10-16T08:34:53","slug":"cert-in-alerts-chrome-critical-flaws-patch","status":"publish","type":"post","link":"https:\/\/newsraise.com\/in\/2026\/10\/16\/cert-in-alerts-chrome-critical-flaws-patch\/","title":{"rendered":"CERT-In Alerts Chrome Users to Critical Flaws as Google Rolls Out Patch"},"content":{"rendered":"\n<!-- Quick Adsense WordPress Plugin: http:\/\/quickadsense.com\/ -->\n<div class=\"9fece8afa224fd09e54b043d0febfb58\" data-index=\"1\" style=\"float: none; margin:10px 0 10px 0; text-align:center;\">\n<script async src=\"https:\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js\"><\/script>\r\n<!-- NR ATF -->\r\n<ins class=\"adsbygoogle\"\r\n     style=\"display:block\"\r\n     data-ad-client=\"ca-pub-8898941184964366\"\r\n     data-ad-slot=\"4839033563\"\r\n     data-ad-format=\"auto\"\r\n     data-full-width-responsive=\"true\"><\/ins>\r\n<script>\r\n     (adsbygoogle = window.adsbygoogle || []).push({});\r\n<\/script>\n<\/div>\n<p>India\u2019s Computer Emergency Response Team (CERT\u2011In) issued an advisory on 14\u202fOctober\u202f2026 warning that several critical security flaws in Google Chrome could expose devices and data to malicious actors. In response, Google has begun distributing an update that resolves a total of 37 reported vulnerabilities, many of which are classified as critical.<\/p>\n<h2>Scope of the vulnerabilities<\/h2>\n<p>The advisory notes that the weaknesses affect Chrome desktop versions older than 155.0.8059.79 on Linux and older than 155.0.8059.79 or 155.0.8059.80 on Windows and macOS. Exploitation could enable attackers to execute arbitrary code, steal sensitive information, or trigger denial\u2011of\u2011service conditions on compromised systems.<\/p>\n<p>Google\u2019s patch addresses 37 distinct issues. Among the most severe is CVE\u20112026\u2011110152, a buffer\u2011overflow bug in ANGLE, the graphics abstraction layer used by Chrome. The flaw allows data to be written beyond the allocated memory region, potentially causing browser crashes or providing a pathway for malicious code execution.<\/p>\n<p>Six additional critical vulnerabilities are described as \u201cuse\u2011after\u2011free\u201d bugs. These affect components that handle PDF files, networking, Scalable Vector Graphics (SVG), media playback, and core browser functionality. A use\u2011after\u2011free error occurs when software accesses memory that has already been released, creating an opening for attackers to interfere with normal operations or inject malicious code.<\/p>\n<p>Beyond the critical set, the update also resolves several high\u2011severity issues across a range of Chrome subsystems. The V8 JavaScript engine, responsible for running web\u2011page scripts, is impacted by CVE\u20112026\u2011110169, another use\u2011after\u2011free flaw. Additional patches cover the Password manager, Extensions framework, WebRTC communication module, Document Object Model (DOM), PDFium rendering library, and the Canvas graphics component. The breadth of affected modules illustrates how vulnerabilities can arise in many layers of a modern browser, from script execution to document handling and network communication.<\/p>\n<p>The high\u2011severity V8 issue was reported by Xinyang\u202fGe of Anthropic, with assistance from the AI system Claude, according to Google\u2019s credits. This acknowledgment highlights the role of external security researchers and AI\u2011assisted analysis in uncovering complex bugs.<\/p>\n<h2>Updating Chrome and related browsers<\/h2>\n<p>CERT\u2011In advises both individuals and organisations running the affected versions to install the latest security update without delay. Users can verify their current Chrome version by opening the browser, clicking the three\u2011dot menu, and navigating to Help\u202f>\u202fAbout Google Chrome. The \u201cAbout\u201d page automatically checks for updates and, if a newer build is available, begins downloading it. A browser relaunch is required to complete the installation.<\/p>\n<p>Google is rolling out the patched version gradually, meaning the update may not appear on every device immediately. The advisory recommends that users who do not see the new version on the first check repeat the process after a short interval.<\/p>\n<p>The advisory also notes that Microsoft Edge, which is built on the same Chromium engine, could be exposed to some of the broader set of vulnerabilities. Microsoft issued its own advisory on 13\u202fOctober\u202f2026 acknowledging the Chromium fixes and stating that a stable\u2011channel update was in development. At the time of reporting, Microsoft had not released a corresponding patch, and Edge users were urged to monitor Microsoft\u2019s update channels for the forthcoming fix.<\/p>\n<h2>Implications and the importance of timely patches<\/h2>\n<p>Web browsers routinely process content from websites, documents, extensions, and other online services. Vulnerabilities in any of these processing paths create opportunities for threat actors to compromise the host system. CERT\u2011In\u2019s warning underscores the risk of continuing to use browsers that contain known security flaws, especially those that allow arbitrary code execution or memory corruption.<\/p>\n<p>The advisory quotes The420 Cybersecurity Insight: \u201cAn Outdated Browser Can Become a Security Risk.\u201d This statement reinforces the broader message that keeping software current is a fundamental defense against exploitation. By applying the latest patches, users close the attack surface presented by the identified flaws and reduce the likelihood of successful cyber\u2011attacks targeting Chrome\u2019s core components.<\/p>\n<p>In summary, the combination of CERT\u2011In\u2019s advisory and Google\u2019s rapid patch deployment highlights a coordinated effort to mitigate a sizable set of vulnerabilities across Chrome\u2019s architecture. Users and organisations are encouraged to verify their browser versions, apply the update to version\u202f155.0.8059.79 or later, and stay alert for further guidance from both Google and Microsoft regarding related Chromium\u2011based browsers.<\/p>\n\n<div style=\"font-size: 0px; height: 0px; line-height: 0px; margin: 0; padding: 0; clear: both;\"><\/div>","protected":false},"excerpt":{"rendered":"<p>India\u2019s CERT-In warned of multiple critical Chrome flaws on Oct. 14, 2026, while Google released an update fixing 37 vulnerabilities, including buffer\u2011overflow and use\u2011after\u2011free bugs.<\/p>\n","protected":false},"author":4,"featured_media":2715,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[299],"tags":[2377,2996,1411,1958,2995],"class_list":["post-2714","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news","tag-browser-update","tag-cert-in","tag-cybersecurity","tag-google-chrome","tag-security-vulnerabilities","entry"],"_links":{"self":[{"href":"https:\/\/newsraise.com\/in\/wp-json\/wp\/v2\/posts\/2714","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/newsraise.com\/in\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/newsraise.com\/in\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/newsraise.com\/in\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/newsraise.com\/in\/wp-json\/wp\/v2\/comments?post=2714"}],"version-history":[{"count":0,"href":"https:\/\/newsraise.com\/in\/wp-json\/wp\/v2\/posts\/2714\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/newsraise.com\/in\/wp-json\/wp\/v2\/media\/2715"}],"wp:attachment":[{"href":"https:\/\/newsraise.com\/in\/wp-json\/wp\/v2\/media?parent=2714"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/newsraise.com\/in\/wp-json\/wp\/v2\/categories?post=2714"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/newsraise.com\/in\/wp-json\/wp\/v2\/tags?post=2714"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}