CERT-In detects multiple vulnerabilities in Chrome, Edge browsers and Android OS

These vulnerabilities can allow remote attackers to execute arbitrary code on the targeted systems compromising their security, CERT-In said. Inappropriate implementation of multiple APIs like Managed Device API, nearby share API, fullscreen and extensions API have led to these vulnerabilities. Vulnerabilities have also been reported in Use after free in Omnibox, Safe Browsing, Tab Strip, Overview Mode, Nearby Share, Input, Sign-In Flow, WebUI, and Insufficient policy enforcement in Background Fetch and Cookies. Attackers can exploit these vulnerabilities to bypass security restrictions in the browser and access privileged resources in the affected systems.