cyber.hendryadrian.com
Security News · securityweek.com

Chrome and Firefox Updates Fix More Than 70 Vulnerabilities

· Original article ↗

Summary

Google and Mozilla released browser updates fixing more than 70 vulnerabilities, including critical and high-severity memory-safety flaws that could potentially enable code execution. Google said it had no information that the Chrome flaws were exploited in the wild.

Key points

  • Chrome versions 149.0.7827.155/.156 for Windows and macOS, and 149.0.7827.155 for Linux, fix 33 security defects.
  • Chrome's fixes include seven critical-severity flaws, six of them use-after-free issues that could potentially enable remote code execution.
  • Some Chrome flaws could enable sandbox escape when combined with exploitation of operating-system or privileged browser-process vulnerabilities.
  • Google reported no known in-the-wild exploitation of the addressed Chrome vulnerabilities.
  • Firefox 152 fixes 40 vulnerabilities, including high-severity use-after-free, privilege-escalation, sandbox-escape, and memory-safety flaws.
  • Mozilla also released updates for Firefox ESR, Thunderbird, and Firefox for iOS.

Article Details

Event Type
Security updates addressing browser and email-client vulnerabilities
Impact
Chrome updates fix 33 security defects, including critical and high-severity memory-safety flaws that could potentially enable remote code execution; some could contribute to a sandbox escape when combined with other vulnerabilities. Firefox 152 fixes 40 vulnerabilities, including memory-safety flaws that Mozilla says could potentially enable arbitrary code execution. Google made no mention of exploitation in the wild.

Vendors

GoogleChrome has been updated to versions 149.0.7827.155/.156 for Windows and macOS and version 149.0.7827.155 for Linux to resolve 33 security defects, 32 of which were found by Google.MozillaSome of the resolved memory safety flaws could potentially be exploited for arbitrary code execution, Mozilla warns.

Products

Firefox ESROn Wednesday, Mozilla also released security updates to address these vulnerabilities in Firefox ESR, Thunderbird, and Firefox for iOS.Firefox for iOSOn Wednesday, Mozilla also released security updates to address these vulnerabilities in Firefox ESR, Thunderbird, and Firefox for iOS.Google ChromeFresh Chrome and Firefox updates are now rolling out with fixes for over 70 vulnerabilities, including critical and high-severity memory safety bugs that could potentially lead to remote code execution (RCE).Mozilla FirefoxFresh Chrome and Firefox updates are now rolling out with fixes for over 70 vulnerabilities, including critical and high-severity memory safety bugs that could potentially lead to remote code execution (RCE).Mozilla ThunderbirdOn Wednesday, Mozilla also released security updates to address these vulnerabilities in Firefox ESR, Thunderbird, and Firefox for iOS.

Related Articles