Chrome and Firefox Release Urgent Updates for Critical Security Flaws
Google and Mozilla have rolled out significant updates for their respective browsers, Chrome and Firefox, to address multiple critical security vulnerabilities, including use-after-free flaws.
Google and Mozilla have independently released urgent security updates for their widely-used web browsers, Chrome and Firefox, to patch a series of critical vulnerabilities. The updates address flaws that could potentially allow attackers to compromise user systems or execute malicious code.
For Google Chrome, the update brings the desktop version to 156.0.8078.73/.74 for Windows and Mac, and 156.0.8078.73 for Linux. This release includes a substantial 52 security fixes, with four of these vulnerabilities being rated as Critical. Users are strongly advised to update their browsers as soon as possible to protect against potential exploitation.
Simultaneously, Mozilla has issued Firefox 159, accompanied by Security Advisory 2026-118. This update rectifies 167 vulnerabilities, demonstrating a broad effort to secure the browser. While the exact severity breakdown for all 167 fixes is not detailed, the inclusion of critical patches underscores the importance of this release.
The technical details reveal that both browsers have addressed familiar memory-handling issues. Specifically, the updates tackle use-after-free vulnerabilities, which occur when a program attempts to access memory that has already been deallocated. Such flaws can lead to application crashes or, more dangerously, provide an avenue for attackers to execute arbitrary code on a victim's machine. These particular bugs were found in areas related to web content processing, including page layout, JavaScript execution, and SVG graphics rendering.
Interestingly, both Google and Mozilla have credited OpenAI Codex Security for discovering some of the vulnerabilities fixed in these updates. This highlights the growing role of AI-powered tools in vulnerability research, complementing traditional human code reviews and automated testing methods. The collaboration between security researchers and browser vendors, facilitated by AI, is proving crucial in identifying and mitigating complex security weaknesses.
While the updates are designed to roll out automatically, users are encouraged to manually check for and apply them to ensure their systems are protected promptly. To update Chrome, users can navigate to 'About Google Chrome' within the browser's settings or help menu, which will trigger a check for available updates. For Firefox, users can access the update mechanism through the 'Help' menu and selecting 'About Firefox'.
These patches are critical for maintaining the security of everyday internet browsing. As browsers are often the primary gateway to the internet for many users, ensuring they are free from exploitable vulnerabilities is paramount. The swift action by both Google and Mozilla in releasing these updates demonstrates their commitment to user security in the face of evolving threats.
The latest updates for Chrome and Firefox collectively address over 200 vulnerabilities. Chrome's version 156 resolves 52 defects, including four critical flaws such as memory corruption in FileSystem and use-after-free in Layout, while Firefox 159 patches 167 vulnerabilities, predominantly use-after-free issues. Neither Google nor Mozilla have reported any in-the-wild exploitation of these newly patched bugs.