Critical Vulnerabilities Patched in Latest Chrome and Firefox Updates
In a move to protect millions of internet users worldwide, Google and Mozilla have released fresh updates for their respective browsers, Chrome 150 and Firefox 152. These patches address critical vulnerabilities that could be exploited by attackers to gain unauthorized access to sensitive data or even take control of users’ computers.
Mozilla’s update, Firefox 152.0.6, resolves two particularly concerning issues: an invalid pointer in the ‘JavaScript: WebAssembly’ component (CVE-2026-15718) and a site isolation problem in the ‘DOM: Navigation’ component (CVE-2026-15719). The company warns that exploit code has been published for both vulnerabilities, although it’s unclear whether these flaws have been used in real-world attacks.
Google’s update for Chrome 150 is equally significant, addressing 15 vulnerabilities, including two critical use-after-free flaws in the Ozone component (CVE-2026-15764 and CVE-2026-15765). The browser refresh also resolves high-severity bugs across various components, such as Skia, Libyuv, HTML-in-Canvas, Linux Toolkit Theming, V8, Media, GPU, Core, and UI. These vulnerabilities include uninitialized use, heap buffer overflow, insufficient policy enforcement, and use-after-free issues.
The fact that only three of the patched vulnerabilities were reported by external researchers highlights the importance of responsible disclosure in the cybersecurity community. Google has yet to disclose the bug bounty amounts paid to these researchers, which is not unusual given the complexity of such negotiations.
While the updates are now rolling out for Windows and macOS users as versions 150.0.7871.124/.125, and for Linux users as version 150.0.7871.124, it’s essential that all Chrome and Firefox users take immediate action to protect themselves against potential attacks. This includes updating their browsers to the latest version, being cautious when opening emails or attachments from unknown sources, and avoiding suspicious websites.
As we’ve seen with recent high-profile breaches, the consequences of neglecting security patches can be severe. By staying up-to-date with the latest browser updates, users can significantly reduce their risk of falling victim to cyber attacks.
Source: SecurityWeek — 2026-07-15