GOOGLE and Mozilla released simultaneous browser updates addressing a total of 114 vulnerabilities across Chrome and Firefox. Chrome’s fixes cover 37 security defects, including seven critical memory issues: a buffer overflow in ANGLE and six use-after-free flaws across Browser, PDF, Network, Core, SVG and Media components. The bulk of the high-severity bugs—29 in total—are use-after-free weaknesses.
Chrome rolled out on Windows, macOS and Linux as versions 155.0.8059.79/.80 for Windows/macOS and 155.0.8059.79 for Linux. Google noted that some of the vulnerabilities were reported by external researchers, with limited or no bug-bounty rewards disclosed for those reports.
Mozilla’s security patching followed with Firefox 158, addressing 77 defects, the majority discovered by Mozilla and by Amy Burnett of OpenAI. The fixes include 30 high-severity use-after-free, sandbox escape, privilege escalation, information disclosure, boundary-related, race condition, JIT miscompilation and integer overflow bugs. In addition to Firefox, Mozilla rolled out Thunderbird 158 and 153.5, and Firefox ESR 153.5 and 115.43 with patches for many of these issues.
Separately, Mozilla introduced Firefox Enterprise, a browser platform with a management console designed for organisations needing tighter security, governance and compliance controls. Firefox Enterprise aims to coexist with existing IT ecosystems, enabling policy, data and AI-use controls while preserving familiar identity providers, SIEMs and MDM integrations. No exploitation details are provided beyond the patch disclosures.