Vulnerabilities affect Chrome versions older than 146.0.7680.80 across Windows, macOS and Linux.
Two critical flaws (CVE-2026-3909, CVE-2026-3910) are already being actively exploited.
Users are advised to update Chrome immediately and avoid suspicious links to stay protected.
India’s cybersecurity agency CERT-In, which comes under the Ministry of Electronics and Information Technology, Government of India, has issued a high-risk warning for Google Chrome users. The authority has flagged multiple vulnerabilities that can put their systems at serious risk. The advisory, tagged CIVN-2026-0141, calls out the flaws that may allow the remote attackers to take control of affected devices. And if exploited, it can result in data theft. Here is all the necessary information, including who is affected, what the reason is, and the fix.
SurveyWho is affected
As per the authority, the vulnerabilities impact Chrome versions that are older than 146.0.7680.80 across Windows, macOS and Linux. The advisory mentioned the reason as the flaws in components like Skia and V8, which can be exploited if a user is tricked into visiting a malicious website. If triggered, the attackers could execute arbitrary code, potentially leading to data theft, system compromise or service disruption.
What’s more concerning is that two vulnerabilities, CVE-2026-3909 and CVE-2026-3910, are already being exploited in the wild. This raises the risk level for both individuals and organisations relying on Chrome for everyday use.
Also read: Microsoft is bringing AI to your Xbox, how can it help gamers
What’s the fix?
The authority has urged all users to update their browsers immediately to the latest version released by Google to avoid the threat. This advice applies to all end users and enterprises using Chrome on desktop systems. Also, just to be on the safe side, you should also keep in mind the points listed below.
How to stay safe
- Avoid clicking on unknown or suspicious links, especially from emails or pop-ups
- Enable automatic updates to receive security patches faster
- Use reliable antivirus or endpoint protection software
- Refrain from downloading files from untrusted websites
Lastly, we advise you to keep all your apps and devices updated with the latest version in order to avoid any situation.
Follow Us
Ashish Singh
Ashish Singh is the Chief Copy Editor at Digit. He's been wrangling tech jargon since 2020 (Times Internet, Jagran English '22). When not policing commas, he's likely fueling his gadget habit with coffee, strategising his next virtual race, or plotting a road trip to test the latest in-car tech. He speaks fluent Geek. View Full Profile
