Chrome and Firefox updates patch more than 180 vulnerabilities
Original title: Chrome, Firefox Updates Patch Over 180 Vulnerabilities
Chrome 157 fixes 83 bugs, five of them critical use-after-free flaws, and Google and Mozilla report no exploitation.
Google and Mozilla shipped browser updates resolving more than 180 vulnerabilities. Chrome fixes 83 defects, including five critical use-after-free bugs in ServiceWorker, CSS, Layout, Skia and Accessibility; the other 78 are high severity. The release is versions 157.0.8103.78/.79 for Windows and macOS and 157.0.8103.78 for Linux. Firefox 160 patches 99 vulnerabilities, 57 high severity, and Thunderbird 160 includes most of those fixes. ESR and older Thunderbird releases also received dozens of patches. Neither vendor mentions in-the-wild exploitation.
Unconfirmed: Google and Mozilla do not say whether any of these flaws are exploited; reward amounts for 12 external Chrome reports are undecided.
- Google found 52 Chrome bugs internally; Anthropic and OpenAI researchers reported 18.
- A high-severity V8 use-after-free drew a $4,000 bounty; 12 other rewards are unset.
- No monetary reward will be paid for the internally discovered Chrome flaws.
- Firefox issues include sandbox escape, privilege escalation and same-origin bypass bugs.
- Thunderbird 153.7, Firefox ESR 153.7 and Firefox ESR 115.45 also shipped fixes.
Impact: Memory corruption, sandbox escape, privilege escalation or data disclosure
| Product | Affected | Fixed in |
|---|---|---|
| Google Chrome | — | 157.0.8103.78/.79 for Windows and macOS; 157.0.8103.78 for Linux |
| Mozilla Firefox | — | 160 |
| Mozilla Thunderbird | — | 160 and 153.7 |
| Mozilla Firefox ESR | — | 153.7 and 115.45 |
- 1.Update Chrome to 157.0.8103.78 or .79 on Windows and macOS, or .78 on Linux.
- 2.Update Firefox to 160, or Firefox ESR to 153.7 or 115.45 where applicable.
- 3.Update Thunderbird to 160 or 153.7.
From the original article
1 min read at securityweek.com
Google fixed 83 flaws with a new Chrome 157 release, and Mozilla addressed 99 bugs in Firefox 160. The post Chrome, Firefox Updates Patch Over 180 Vulnerabilities appeared first on SecurityWeek.
By Ionut Arghire · securityweek.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.