NITDA warns of critical security flaw in Google Chrome

Omeiza Bilal

The National Information Technology Development Agency (NITDA) has raised an urgent alarm over a serious security flaw in the Google Chrome browser, identified as CVE-2024-797.

This vulnerability, discovered by Google, is actively being exploited by cyber attackers, putting millions of users at risk.

The flaw is rooted in Chrome’s V8 JavaScript engine, where a “type confusion” vulnerability leads to memory corruption due to the browser’s misinterpretation of data types.

This flaw could allow attackers to run harmful programs, potentially taking full control of unpatched systems simply by luring users to malicious websites.

NITDA’s Emergency Readiness and Response Team (CERRT) have underscored the severity of this issue, warning that attackers could bypass security protocols, execute malicious code, and even crash affected systems.

“The vulnerability enables attackers to potentially take full control of affected systems by exploiting memory corruption caused by the misinterpretation of data types.

“This could allow attackers to bypass security protocols and measures, execute malicious code, and even cause system crashes.

“The vulnerability is particularly dangerous because it can be triggered simply by visiting a malicious website,” NITDA stated.

The agency strongly advises all users to update their browsers to the latest version immediately—specifically versions 128.0.6613.84/.85 for Windows and macOS, and 128.0.6613.84 for Linux.

Users of Chromium-based browsers like Microsoft Edge, Brave, Opera, and Vivaldi are also urged to update as soon as possible. NITDA’s alert is part of a broader effort to combat the rising tide of cyber threats targeting internet users both in Nigeria and globally.

With cyberattacks becoming increasingly sophisticated, NITDA emphasizes the critical importance of keeping software up-to-date to protect personal and organizational systems from potential exploits.

This alert from NITDA is the latest in a series of warnings about rising cyber threats targeting internet users in Nigeria and globally.

In recent months, there has been an uptick in the number of security advisories issued by cybersecurity agencies, highlighting the increasing sophistication and frequency of cyberattacks. The exploitation of browser vulnerabilities has become a common tactic used by cybercriminals to infiltrate systems and steal sensitive information.

The trend underscores the importance of maintaining up-to-date software as cyber threats continue to evolve.

As attackers become more adept at identifying and exploiting vulnerabilities, the need for vigilance and proactive cybersecurity measures is more critical than ever.