Google and Mozilla have released significant updates for Chrome and Firefox, patching over 180 vulnerabilities in the process. These latest refreshes are more than a routine maintenance cycle – they’re a testament to the ongoing cat-and-mouse game between browser developers and malicious actors.
The Chrome update resolves an astonishing 83 security defects, including five critical-severity use-after-free issues. For those unfamiliar with technical jargon, use-after-free is a type of vulnerability that occurs when a program tries to access memory that has already been freed or reused by another process. In simpler terms, it’s like trying to read from a page in a book after you’ve torn it out – the data just isn’t there anymore.
The remaining 78 high-severity weaknesses are mostly use-after-free (24), out-of-bounds read/write (10), type confusion (9), uninitialized resource (9), and incorrect/missing authorization (8). Google discovered 52 of these vulnerabilities internally, while Anthropic and OpenAI researchers reported an additional 18. It’s worth noting that no monetary reward will be handed out for any of these flaws – a change from the usual practice.
Mozilla has also made significant strides with its Firefox update, which patches 99 vulnerabilities, including 57 high-severity security weaknesses. Most of these flaws are use-after-free, incorrect boundary, and sandbox escape issues, as well as invalid pointer, privilege escalation, information disclosure, and same-origin policy bypass bugs. The browser refresh also resolved some long-standing problems.
Thunderbird 160 received patches for most of the security defects found in Firefox, with 103 fixes in total. Thunderbird 153.7, Firefox ESR 153.7, and Firefox ESR 115.45 also rolled out with dozens of vulnerability patches. It’s reassuring to see browser developers taking proactive measures to address these issues before they can be exploited.
While Google and Mozilla make no mention of any of these vulnerabilities being exploited in the wild, it’s essential for users to stay vigilant. The latest updates are now rolling out as versions 157.0.8103.78/.79 for Windows and macOS, and as version 157.0.8103.78 for Linux.
In conclusion, browser developers are working tirelessly to keep their products secure in an increasingly complex threat landscape. As a user, it’s crucial to stay informed about the latest updates and patches – not just for Chrome or Firefox but for any software that interacts with your personal data. Make sure to check for updates regularly and follow best practices for securing your online presence.
Source: SecurityWeek — 2026-11-12