cyber.hendryadrian.com
Security News · securityweek.com

Chrome and Firefox Updates Patch More Than 200 Vulnerabilities

· Original article ↗

Summary

Google patched 52 security flaws in Chrome 156, while Mozilla patched 167 in Firefox 159. Neither company reported in-the-wild exploitation; users are advised to update.

Key points

  • Chrome 156 fixes 52 security defects, including four critical-severity flaws involving FileSystem, FileAPI, Skia and Layout.
  • CVE-2026-118306 could allow code execution outside Chrome’s sandbox via a crafted HTML page.
  • Google also patched 46 high-severity Chrome flaws; many involve memory corruption, input validation or use-after-free issues.
  • Firefox 159 fixes 167 security defects, including 108 high-severity flaws. Most address use-after-free issues; other fixes cover sandbox escapes, privilege escalation, boundary errors and same-origin policy bypasses.
  • Mozilla also released Thunderbird 159 and 153.6, and Firefox ESR 153.6 and 115.44, with patches for many of the vulnerabilities.
  • Google and Mozilla did not report that any of the flaws were being exploited in the wild; users are advised to update.

Article Details

Event Type
Security updates released for Chrome, Firefox, Thunderbird, and Firefox ESR.
Impact
The updates address more than 200 vulnerabilities. Chrome 156 patches 52 security defects, including four critical-severity flaws; Firefox 159 patches 167 defects, including 108 high-severity flaws. CVE-2026-118306 could allow arbitrary code execution outside the sandbox through a crafted HTML page. Google and Mozilla reported no known in-the-wild exploitation and advised users to update.

CVE

CVE-2026-118306CVE-2026-118306, the FileSystem bug, could allow arbitrary code execution outside the sandbox through a crafted HTML page.

Vendors

GoogleGoogle and Mozilla on Tuesday rolled out fresh Chrome and Firefox updates that resolve more than 200 vulnerabilities in the popular browsers.MozillaGoogle and Mozilla on Tuesday rolled out fresh Chrome and Firefox updates that resolve more than 200 vulnerabilities in the popular browsers.

Products

Firefox ESROn Tuesday, Mozilla also released Thunderbird 159 and 153.6, and Firefox ESR 153.6 and 115.44 with patches for many of these vulnerabilities.Google ChromeGoogle and Mozilla on Tuesday rolled out fresh Chrome and Firefox updates that resolve more than 200 vulnerabilities in the popular browsers.Mozilla FirefoxGoogle and Mozilla on Tuesday rolled out fresh Chrome and Firefox updates that resolve more than 200 vulnerabilities in the popular browsers.Mozilla ThunderbirdOn Tuesday, Mozilla also released Thunderbird 159 and 153.6, and Firefox ESR 153.6 and 115.44 with patches for many of these vulnerabilities.

Related Articles