CERT-In Issues Critical Security Alert for Google Chrome Users Worldwide
Google Chrome users have been urged to update their browsers following a critical cybersecurity advisory issued by India's Computer Emergency Response Team (CERT-In). The warning identifies multiple vulnerabilities that could allow remote attackers to execute arbitrary code, bypass security restrictions or cause denial-of-service conditions on affected systems.
The advisory, published on November 10, 2026, highlights security weaknesses in several Chrome components. One of the vulnerabilities has also been reported as actively exploited, increasing the urgency for users and organisations to install the available security updates.
Multiple Vulnerabilities Identified in Google Chrome
According to CERT-In's Vulnerability Note CIVN-2026-0544, the security issues affect Google Chrome versions earlier than 157.0.8103.50 and Extended Stable versions earlier than 156.0.8078.96.
The reported vulnerabilities involve several browser components, including:
XML: Use-after-free vulnerabilities that could affect memory handling.
V8: Type-confusion issues involving Chrome's JavaScript engine.
GPU and WebGL: Security weaknesses involving graphics processing and resource management.
FileSystem: Incorrect authorisation that could affect access controls.
Compositing: Buffer overflow vulnerabilities that could compromise system security.
If successfully exploited, these weaknesses could allow attackers to execute malicious code, bypass browser security protections or disrupt normal system operations.
Actively Exploited Vulnerability Raises Concerns
One of the vulnerabilities, identified as CVE-2026-125350, has been reported as exploited in the wild.
The issue was classified as a high-severity use-after-free vulnerability. Such weaknesses can occur when software continues accessing memory after it has been released, potentially allowing attackers to manipulate browser behaviour.
The Canadian Centre for Cyber Security also confirmed that the vulnerability had been added to the US Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities catalogue on November 10.
The reported exploitation makes timely patching particularly important for individuals and organisations using affected Chrome versions.
Google Releases Security Updates
Google released security updates for Chrome's desktop Stable channel on November 9, 2026.
The updated versions include:
Windows: Chrome 157.0.8103.50 or 157.0.8103.51
macOS: Chrome 157.0.8103.50 or 157.0.8103.51
Linux: Chrome 157.0.8103.50
Extended Stable: Version 156.0.8078.96 for Windows and macOS
Google has advised users to install the latest available version as updates roll out across systems.
How Chrome Users Can Protect Their Devices
Users can reduce exposure to known vulnerabilities by ensuring their browsers are updated.
Recommended steps include:
Open Google Chrome on your computer.
Select the three-dot menu in the top-right corner.
Navigate to Help and select About Google Chrome.
Allow Chrome to check for and install available updates.
Restart the browser to complete the installation.
Users should also avoid opening suspicious links, downloading files from untrusted websites or installing unfamiliar browser extensions.
Organisations should review browser versions across employee devices and apply security patches through their standard IT update processes.
Why Browser Security Updates Matter
Web browsers are frequently used to access email, financial services, business applications and cloud-based platforms. A vulnerability in a widely used browser can therefore create risks for both individual users and enterprise networks.
The latest advisory highlights the importance of timely software updates and continuous vulnerability management.
As cyber threats become more sophisticated, keeping browsers and other frequently used applications updated remains an essential part of maintaining digital security.
