Skip to main content

CERT-In points out multiple Google Chrome vulnerabilities: What you need to know

The Indian Computer Emergency Response Team (CERT-In) has warned users about multiple vulnerabilities in Google Chrome for desktop that can let hackers gain access to their computers. The multiple vulnerabilities could allow a remote attacker to execute arbitrary code and Security restriction bypass on the targeted system, according to an advisory by CERT-In, that comes under IT Ministry. "These vulnerabilities exist in Google Chrome due to use after free in FedCM, SwiftShader, ANGLE, Blink, Sign-In Flow, Chrome OS Shell; Heap buffer overflow in Downloads, Insufficient validation of untrusted input in Intents, Insufficient policy enforcement in Cookies and Inappropriate implementation in Extensions API," the cyber agency said. A hacker could exploit these vulnerabilities by sending specially crafted requests on the targeted system. Successful exploitation of these vulnerabilities could allow a remote attacker to execute arbitrary code and Security restriction bypass on the targeted system, said CERT-In. "The vulnerability (CVE-2022-2856) is being exploited in the wild. The users are advised to apply patches urgently," said the agency. CERT-In also warned about bugs in Apple iOS, iPadOS and macOS and a "remote attacker could exploit this vulnerability by enticing a victim to open a specially-crafted file". It also found multiple vulnerabilities in Cisco products again, which could allow the attacker to execute arbitrary code, information disclosure and cross site scripting attack on an affected system. The nation's premier cyber agency had alerted about bugs in Cisco products in the recent past too.

(Except for the headline, the rest of this IANS article is un-edited)

For more technology news, product reviews, sci-tech features and updates, keep reading Digit.in.



from Apps News https://ift.tt/XYJQydT
Labels:

Comments

Post a Comment

Popular posts from this blog

Realme 12 Pro vs Poco X6 Pro: Which One to Buy?

Realme 12 Pro 5G was unveiled in India last week with a Snapdragon 6 Gen 1 SoC, a 5,000mAh battery with 67W fast charging, and a triple rear camera setup. The phone has a starting price of Rs. 25,999 and a lot of competition. We put the Realme 12 Pro 5G head-to-head against the Poco X6 Pro 5G, which starts at Rs. 26,999, to find out which one’s more value for money. from Gadgets 360 https://ift.tt/iXNeUtW
14 comments
Read more

Jio effect: Bharti Airtel may soon shut down 2G, 3G and shift on 4G-only network

Taking a cue from Reliance Jio which offers only 4G network, Bharti Airtel is looking to transform it current setup to become the second 4G-only network provider in India. According to the company’s Chief Executive, Gopal Vittal, Airtel is expediting steps to deploy the fourth generation airwaves in the 900 Mhz band, which are currently used only for 2G voice services, to 4G only. The Economic Times said that Airtel has 116 units of airwaves in the 900 MHz band across 16 circles. “We are seeing dramatic growth in 4G demand, and over a period of time, the 900 Mhz band will purely serve our 4G customers, while 2G services will be continue to be available on the 1800 Mhz band,” Vittal said, adding that the company will have “a transition strategy in place” in the run-up to deploying all its 900 MHz band spectrum for 4G services. The executive also signalled that the telecom service provider could shut down 3G networks in the near future, saying “the demise of 3G technology is rapidly dra...
Post a Comment
Read more