Chromebooks are affordable and functional laptops that are most suitable for day-to-day usage like browsing, word processing, watching shows, movies, etc. These laptops are powered by Google’s ChromeOS operating system and the Ministry of Electronics and Information Technology’s Indian Computer Emergency Response Team (CERT-IN) has issued a warning for select ChromeOS operating system.
Indian Computer Emergency Response Team (CERT-IN) recently issued a warning for Google ChromeOS users. The government body has classified the risk as ‘‘high severity’ and noted multiple vulnerabilities in Google ChromeOS which could make it an easy target for hackers.
Who all are affected
Chromebook users running versions prior to 108.0.5359.71 are currently affected.
What the government has said
CERT noted, “Multiple vulnerabilities have been reported in Google Chrome OS which could be exploited by a remote attacker to bypass security restrictions, execute arbitrary code or cause a denial of service condition on the targeted system.”
“Successful exploitation of these vulnerabilities could allow a remote attacker to bypass security restriction, execute arbitrary code or cause a denial of service condition on the targeted system”, add’s CERT-In.
The government body has clarified that these vulnerabilities exist on Google Chrome OS due to “type confusion in V8; Use after free in Camera Capture, Extensions, Mojo, Audio, Forms, Sign-In, Live Caption and Accessibility; Out-of-bounds write in Lacros Graphics; Inappropriate implementation in Fenced Frames and Navigation; Insufficient policy enforcement in Popup Blocker, Autofill, DevTools, File System API and Safe Browsing; Insufficient validation of untrusted input in Downloads and CORS; Insufficient data validation in Directory. An attacker could exploit these vulnerabilities by persuading a victim to visit a specially crafted website.”
Solution
To avoid falling prey to getting hacked, CERT-In has advised users to update their Chrome OS to the latest version available. To add, Google has recently rolled out the Chrome OS 108 update which includes security patches for the vulnerabilities found.
Indian Computer Emergency Response Team (CERT-IN) recently issued a warning for Google ChromeOS users. The government body has classified the risk as ‘‘high severity’ and noted multiple vulnerabilities in Google ChromeOS which could make it an easy target for hackers.
Who all are affected
Chromebook users running versions prior to 108.0.5359.71 are currently affected.
What the government has said
CERT noted, “Multiple vulnerabilities have been reported in Google Chrome OS which could be exploited by a remote attacker to bypass security restrictions, execute arbitrary code or cause a denial of service condition on the targeted system.”
“Successful exploitation of these vulnerabilities could allow a remote attacker to bypass security restriction, execute arbitrary code or cause a denial of service condition on the targeted system”, add’s CERT-In.
The government body has clarified that these vulnerabilities exist on Google Chrome OS due to “type confusion in V8; Use after free in Camera Capture, Extensions, Mojo, Audio, Forms, Sign-In, Live Caption and Accessibility; Out-of-bounds write in Lacros Graphics; Inappropriate implementation in Fenced Frames and Navigation; Insufficient policy enforcement in Popup Blocker, Autofill, DevTools, File System API and Safe Browsing; Insufficient validation of untrusted input in Downloads and CORS; Insufficient data validation in Directory. An attacker could exploit these vulnerabilities by persuading a victim to visit a specially crafted website.”
Solution
To avoid falling prey to getting hacked, CERT-In has advised users to update their Chrome OS to the latest version available. To add, Google has recently rolled out the Chrome OS 108 update which includes security patches for the vulnerabilities found.
For all the latest Technology News Click Here
For the latest news and updates, follow us on Google News.
Denial of responsibility! TechNewsBoy.com is an automatic aggregator around the global media. All the content are available free on Internet. We have just arranged it in one platform for educational purpose only. In each content, the hyperlink to the primary source is specified. All trademarks belong to their rightful owners, all materials to their authors. If you are the owner of the content and do not want us to publish your materials on our website, please contact us by email – [email protected]. The content will be deleted within 24 hours.
