CERT-In identifies numerous bugs in Google Chrome and GitLab

The Indian Computer Emergency Response Team, which comes under the Ministry of Electronics & Information Technology, has warned users about multiple vulnerabilities in Google Chrome and GitLab which could enable an attacker to obtain sensitive information, bypassing security restriction and cause denial-of-service conditions on the targeted system. The CERT-In advisory said, "Multiple vulnerabilities have been reported in Google Chrome which could be exploited by a remote attacker to trigger remote code execution and DoS conditions on the targeted system.” As per the cyber agency, these vulnerabilities exist in Google Chrome due to the use-after-free flaw in Dawn and Picture in Picture components. On the other hand, multiple vulnerabilities such as authentication bypass vulnerability, security restriction bypass, and denial of service exist in GitLab due to improper authentication mechanisms, flaws in handling domain-based restrictions when processing crafted email addresses, path traversal vulnerability and an inefficient regular expression, respectively. The event will take place in May 2024 and the tech player has promised to upgrade the security of smartphones with several new enhanced features especially focusing on the rising trend of artificial intelligence.