Google Chrome users have been advised to take immediate security precautions after India’s cybersecurity agency, the Indian Computer Emergency Response Team (CERT-In), reported multiple vulnerabilities in the popular web browser. The agency has classified the identified weaknesses as critical, warning that cybercriminals could exploit them to compromise devices and disrupt normal system operations.
The warning is particularly concerning because one of the reported vulnerabilities is already being actively exploited. Users operating outdated versions of Google Chrome could therefore face an increased security risk if they delay installing the latest updates.
According to the advisory, attackers could potentially use specially designed web pages to execute malicious code, bypass browser security restrictions and cause applications to crash. The development highlights why keeping browsers updated is essential for protecting personal information and digital devices.
Multiple Security Flaws Could Put Chrome Users at Risk
CERT-In has identified vulnerabilities affecting several important components of Google Chrome, including its JavaScript engine, GPU, FileSystem, XML and WebGL technologies.
These components perform different functions, from processing website content and graphics to managing browser resources. A weakness in any of these areas could create an opportunity for attackers to interfere with the browser’s normal functioning.
One of the most serious concerns involves CVE-2026-125350, a use-after-free vulnerability associated with Chrome’s XML component. Such vulnerabilities occur when software attempts to access memory that has already been released. If successfully exploited, they can potentially allow attackers to execute arbitrary code.
CERT-In has indicated that this particular vulnerability is being exploited in the wild. Google has also acknowledged awareness of an exploit for the issue, although detailed information about the attackers or the exact exploitation methods has not been publicly established.
Other reported weaknesses could allow attackers to trigger browser crashes, bypass certain security protections or interfere with system resources. A successful attack may depend on the browser version, the nature of the vulnerability and the user’s interaction with malicious content.
Which Chrome Versions Are Affected by the Warning?
CERT-In issued its security advisory, identified as CIVN-2026-0544, on November 10, 2026. The warning covers vulnerable versions of Google Chrome and Chrome Extended Stable.
According to the advisory, the affected versions include:
-
Google Chrome versions earlier than 157.0.8103.50.
-
Google Chrome Extended Stable versions earlier than 156.0.8078.96.
Google released security updates for its desktop browser to address the reported vulnerabilities. The updated Stable Channel versions include 157.0.8103.50 and 157.0.8103.51 for Windows and macOS, while Linux users received version 157.0.8103.50. The Extended Stable release for Windows and macOS was updated to 156.0.8078.96.
The updates address several security issues, including the vulnerability identified as CVE-2026-125350. However, Google distributes browser updates in stages, meaning that availability may vary across devices.
Users should check their installed browser version instead of assuming that Chrome is automatically updated. Anyone using an older version should install the latest update offered for their device.
How to Update Google Chrome on Your Computer and Smartphone
CERT-In has advised users to apply Google’s latest security updates to reduce the risk of potential attacks. Updating Chrome is a straightforward process and can be completed through the browser’s settings.
Desktop users can follow these steps:
-
Open Google Chrome on the computer.
-
Click the three-dot menu in the upper-right corner.
-
Select the Help option.
-
Click on About Google Chrome.
-
Allow Chrome to check for available updates.
-
Install the update if one is available.
-
Restart the browser to complete the process.
Android users can update Chrome through the Google Play Store, while iPhone and iPad users can check for updates through Apple’s App Store.
After updating, users should revisit the About Google Chrome section to verify the installed version. They should also keep their operating systems and other applications updated to minimise exposure to known security weaknesses.
Why Chrome’s Security Warning Matters for Everyday Users
Google Chrome is widely used for accessing banking services, online shopping platforms, email accounts, educational resources and government websites. This makes browser security important for individuals as well as businesses.
A compromised browser could potentially expose users to malicious code, unauthorised activity or disruptions while accessing online services. Although the presence of a vulnerability does not mean every Chrome user has been attacked, outdated software can leave devices exposed to known threats.
Users should remain cautious when opening unfamiliar links, downloading files from untrusted websites or accessing suspicious web pages. Avoiding unexpected attachments and using reliable security tools can provide additional protection.
The latest CERT-In warning is a reminder that cybersecurity requires regular attention. Installing software updates promptly, checking browser versions and following official security advisories can help reduce the chances of falling victim to cyberattacks.
For Chrome users, the most important step is to ensure that their browser is running the latest available version and that all relevant security patches have been installed.
