Chrome and Firefox Updates Fix More Than 180 Flaws

Google and Mozilla have issued security updates for Chrome and Firefox, addressing a combined total of more than 180 vulnerabilities. Chrome’s new stable build, version 157.0.8103.78/79 for Windows and macOS and 157.0.8103.78 for Linux, fixes 83 defects.

Five are critical use-after-free flaws in ServiceWorker, CSS, Layout, Skia, and Accessibility, with the remaining 78 being high-severity issues, including use-after-free, out-of-bounds read/write, type confusion, uninitialised resources, and incorrect or missing authorisation. Google said 52 flaws were found internally and 18 were reported by researchers from Anthropic and OpenAI.

The company has paid a $4,000 bug bounty for a high-severity use-after-free in V8, but has not yet determined payouts for the other externally reported flaws. The update arrives as part of Chrome 157.0.8103.x releases for Windows, macOS and Linux.

Firefox 160 also shipped this week, patching 99 vulnerabilities, with 57 deemed high-severity. The bulk are use-after-free, boundary handling issues, and sandbox escapes, alongside fixes for invalid pointer conditions, privilege escalation, information disclosure, and same-origin policy bypasses. Mozilla noted that many fixes were also applied to Thunderbird 160, which landed with 103 fixes, and related ESR branches also received patches. Neither Google nor Mozilla indicated that any of the vulnerabilities have been exploited in the wild.