Chrome and Firefox Updates Patch 114 Vulnerabilities as Mozilla Launches Firefox Enterprise

Summary

Google and Mozilla released Chrome and Firefox updates fixing 114 security flaws. Mozilla also introduced Firefox Enterprise, with a management console for organizations to control browser policies, access, data transfers, and AI use.

Key points

Chrome's update fixes 37 security defects, including seven critical memory issues and 29 high-severity bugs.
Google says at least 15 Chrome flaws were reported by Xinyang Ge of Anthropic, assisted by Claude; no bounty will be paid for those reports.
Chrome versions 155.0.8059.79/.80 for Windows and macOS, and 155.0.8059.79 for Linux, include the fixes.
Firefox 158 fixes 77 security defects, including 30 high-severity issues; Mozilla and Amy Burnett of OpenAI reported the largest numbers.
Thunderbird 158 and 153.5, and Firefox ESR 153.5 and 115.43, also received patches for many of the issues.
Firefox Enterprise includes an on-premises management console for organizational policies, access, data transfers, and AI use.

Article Details

Vulnerability Types: Buffer overflow
Use-after-free
Sandbox escape
Privilege escalation
Information disclosure
Incorrect boundary
Race condition
JIT miscompilation
Integer overflow
Severity: Chrome: seven critical, 29 high, and one medium severity vulnerabilities. Firefox: 30 high-severity vulnerabilities among 77 patched defects.
Affected Versions: Chrome 155.0.8059.79/.80 for Windows and macOS
Chrome 155.0.8059.79 for Linux
Firefox 158
Thunderbird 158 and 153.5
Firefox ESR 153.5 and 115.43
Exploitation Status: unknown
Exploit Availability: unknown
Patch Status: available