Chrome, Firefox Updates Patch 115 Vulnerabilities
Google and Mozilla patch 115 vulnerabilities across Chrome 153 and Firefox 156, including three critical Chrome bugs; no exploitation reported.
Google's Chrome 153 (153.0.8010.47/.48 for Windows/macOS) fixes 42 flaws, including three critical: CVE-2026-91726, an out-of-bounds read in WebGL, and use-after-free bugs CVE-2026-91721 and CVE-2026-91749 in Internals and Workers. Mozilla's Firefox 156 resolves 73 vulnerabilities, including 29 high-severity use-after-free and privilege escalation issues, with related fixes in Thunderbird and Firefox ESR branches. Neither vendor reports any of the defects being exploited in the wild.
- Chrome 153 patches 42 bugs: 3 critical, 28 high severity
- Critical Chrome flaws include WebGL OOB read and two use-after-free bugs
- Firefox 156 fixes 73 vulnerabilities, including 29 high-severity issues
- Fixes also shipped in Thunderbird 156/140.16 and Firefox ESR branches
- No in-the-wild exploitation reported by either vendor
- Products
- ChromeFirefoxThunderbird
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2026-91749+2 related CVEs | Critical Use-After-Free in Google Chrome Workers Enables Sandbox Escape | 9.6 group max | — |
From the original article
1 min read at securityweek.com
Google resolved 42 security defects in Chrome, and Mozilla fixed 73 bugs in Firefox. The post Chrome, Firefox Updates Patch 115 Vulnerabilities appeared first on SecurityWeek.
By Ionut Arghire · securityweek.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.