Chrome 156 and Firefox 159 patch critical memory-safety flaws
Original title: Chrome and Firefox updates fix serious security flaws. Install them now
Google shipped 52 fixes, four rated Critical, and Mozilla fixed 167 bugs; both credited AI-assisted bug finding.
On October 27, Google released Chrome Stable 156.0.8078.73/.74 for Windows and Mac and 156.0.8078.73 for Linux, with 52 security fixes including four rated Critical. The same day Mozilla Security Advisory 2026-118 fixed 167 vulnerabilities in Firefox 159. Both releases address use-after-free bugs in page layout, JavaScript, and SVG that can crash the browser or, in some cases, let an attacker run code. Rollout is gradual; the article says OpenAI Codex Security found bugs in both, and Mozilla worked with Anthropic on validated reports. Exploitation is not discussed.
Unconfirmed: The article does not say whether any of the flaws are being exploited.
- Chrome desktop builds are 156.0.8078.73/.74 on Windows and Mac and 156.0.8078.73 on Linux.
- Mozilla’s advisory covers 167 vulnerabilities; Firefox should read 159.0 or later after update.
- Use-after-free issues affect page layout, JavaScript processing, and SVG graphics.
- Google and Mozilla credit OpenAI Codex Security; Mozilla also collaborated with Anthropic.
Impact: Possible code execution or crashes via malicious web content
| Product | Affected | Fixed in |
|---|---|---|
| Google Chrome | — | 156.0.8078.73/.74 (Windows and Mac); 156.0.8078.73 (Linux) |
| Mozilla Firefox | — | 159.0 or later |
- 1.Update Chrome to 156.0.8078.73 or .74 and relaunch.
- 2.Update Firefox to 159.0 or later via Help, About Firefox.
From the original article
2 min read at malwarebytes.com
Google and Mozilla released security updates for Chrome and Firefox on October 27. Update your browser as soon as you can.
By @MetallicaMVP · malwarebytes.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.