NITDA Sounds Alarm to Chrome Users: Take Action Against Detected Bug

The National Information Technology Development Agency (NITDA) has warned Nigerians of a critical security flaw in the Google Chrome browser and advised all Google Chrome users to immediately update their browser to the latest version to avoid falling victim to cyber hackers.
NITDA, through its Emergency Response Team (CERRT), said Google discovered the vulnerability in code CVE-2024-797 and warned that cybercriminals are actively using it to attack individuals online.

According to the agency, “The flaw, classified as a “type confusion” vulnerability, is located within Chrome’s V8 JavaScript engine, which plays a crucial role in how the browser handles JavaScript files. The vulnerability arises from the browser’s misinterpretation of data types, leading to memory corruption. This, in turn, could allow attackers to run harmful programs on devices that have not yet been updated to the latest version of Chrome.”

It was warned that the vulnerability could have serious consequences if an attacker gains full control over the affected system. “The vulnerability enables attackers to potentially take full control of affected systems by exploiting memory corruption caused by the misinterpretation of data types.
“This could allow attackers to bypass security protocols and measures, execute malicious code, and even cause system crashes. The vulnerability is particularly dangerous because it can be triggered simply by visiting a malicious website,” NITDA explained.
NITDA therefore urges all Google Chrome users to immediately update to the latest version of the browser, adding:
“Users can check for updates by navigating to the Chrome menu, selecting “Help,” and then clicking on “About Google Chrome” to apply any available updates. Moreover, users of Chromium-based browsers, such as Microsoft Edge, Brave, Opera, and Vivaldi, are also urged to apply the necessary updates as soon as they become available.”
The agency stressed that regular upgrades are essential to ensure the security of organizational and individual systems and protect them from potential attacks.