
Google has pushed out Chrome version 151, a major update that addresses a staggering 370 security vulnerabilities. Among these, seven have been classified as critical, meaning attackers could exploit them to take full control of a user's system. The update is available for Windows, macOS, and Linux.
The seven critical vulnerabilities largely stem from memory safety issues, a common attack vector in browsers. Google's security team has not released technical specifics for most bugs, a standard move to give users time to patch before attackers reverse-engineer the fixes.
The update also includes patches for high-severity issues related to use-after-free errors, buffer overflows, and improper input validation. These flaws could allow remote code execution or data theft if left unaddressed.
India's Computer Emergency Response Team (CERT-In) has issued a high-severity advisory for Chrome users across Windows, macOS, and Linux. The agency warned that the vulnerabilities could allow an attacker to compromise the targeted system.
CERT-In has recommended that users update their Chrome browser to version 151 immediately. The advisory is part of the agency's ongoing effort to track and mitigate cyber threats targeting Indian internet users.
Users can update their browser by navigating to the menu (three dots in the top-right corner), selecting Help, and then About Google Chrome. The browser will automatically check for and install the latest update. A relaunch is required to complete the process.
Enterprise administrators should ensure that managed devices receive the update through their deployment systems. Google has also updated the Stable channel for ChromeOS and Android users, though those platforms may have a slightly different patch set.
With 370 vulnerabilities patched in a single release, Chrome 151 represents one of the largest security updates in the browser's history. The sheer volume of fixes suggests Google has been stockpiling patches or conducting a major internal audit.
Users who delay updating their browsers risk exposure to known exploits. Given that Chrome holds a dominant share of the Indian browser market, the update is especially critical for local users who rely on the browser for banking, work, and communication.
Security researchers will likely analyze the patch in the coming weeks to reverse-engineer the flaws, which means unpatched systems could become prime targets for cybercriminals. Google has not disclosed whether any of the vulnerabilities have been exploited in the wild.
Users are advised to update immediately and ensure automatic updates are enabled. The next Chrome release is expected to follow the standard six-week cycle, though Google may issue an emergency patch if any of the critical flaws are actively weaponized.