Chrome 144, Firefox 147 Patch High-Severity Vulnerabilities

Chrome 144 and Firefox 147 patches have been released, addressing a total of 26 security defects, including several high-severity flaws. Chrome 144, rolled out to the stable channel, fixes 10 security defects and three high-severity bugs, two of which affect V8 and include CVE-2026-0899 and CVE-2026-0900, with a third in Blink identified as CVE-2026-0901; four medium- and three low-severity flaws in components such as V8 and ANGLE are also repaired.

According to Google, the company handed out $18,500 in bug bounty rewards for six of these vulnerabilities. The fresh release lands as version 144.0.7559.59 for Linux and 144.0.7559.59/60 for Windows and macOS.

Firefox 147, released on the same day, patches 16 defects, including seven high-severity issues; four sandbox escape flaws affect the Graphics and Messaging System, and the remaining three include a mitigation bypass in DOM, a use-after-free in IPC, and memory-safety bugs that could lead to remote code execution. Mozilla also issued Firefox ESR 140.7 and Firefox ESR 115.32 alongside these fixes.