Due to the identification of two genuine vulnerabilities, the Pakistan Telecommunication Authority (PTA) has released urgent cybersecurity advice advising users to update their Google Chrome browsers right now.
The caution emphasizes that these vulnerabilities may permit remote attackers to introduce malicious software on affected devices. Users of Windows, macOS, and Linux are affected by these vulnerabilities, which were displayed in all forms of Chrome before the crisis update.
The first flaw, CVE-2024-4671, empowers programmers to get past Chrome’s sandbox environment and possibly access a user’s device by making malicious websites. The V8 JavaScript engine is influenced by the second vulnerability, CVE-2024-4761, which causes an out-of-bounds write that may cause arbitrary code execution. Due to the possibility of abuse through compromised websites, both vulnerabilities are classified as high-risk risks.
Read More: PTA Warns of Critical Linux OS Vulnerability: What You Need to Know
To mitigate these risks, PTA recommends all users update Google Chrome to version 124.0.6367.207 or later. By selecting “Settings > About Chrome” and restarting the browser to see if there is an update available, users can verify their current version. PTA also advises configuring Chrome for automatic updates to maintain ongoing protection against emerging threats.
Additionally, PTA urges users to stay alert and monitor their systems for any signs of unusual activity that may indicate an attempted exploitation. Those experiencing security issues related to these vulnerabilities are empowered to report them through the PTA CERT Portal or using email.
With the developing frequency of browser-based security dangers, cybersecurity experts stress the significance of taking proactive steps to secure frameworks.