conv.

All stories
SecurityQuiet 13d · day 16

Chrome and Firefox updates patch over 200 security flaws

Google's Chrome 156 and Mozilla's Firefox 159 close more than 200 vulnerabilities, including critical sandbox-escape bugs.

newest coverage 12d agosummary written 12d ago7 pieces NewswiresGoogle NewsMastodon

What to know

  • Chrome 156 fixes 52 bugs (four critical, 46 high-severity); Firefox 159 fixes 167 bugs (108 high-severity), together over 200 patched flaws.
  • The critical Chrome flaw CVE-2026-118306 is a FileSystem memory-corruption bug that could enable arbitrary code execution outside the sandbox via a crafted HTML page.
  • Neither Google nor Mozilla has reported in-the-wild exploitation, but both advise updating immediately.
  • 39 of the Chrome bugs were found internally or with AI assistance and are not eligible for bug bounty rewards; Google has not finalized payouts for the rest.

Google Chrome developerMozilla Firefox developer

Chrome and Firefox updates patch over 200 security flaws
securityweek.com

How it unfolded 4 developments, newest first · click a bar or a number to jump articlesposts

Peak 2 pieces in 4h at Oct 28, 9 AM; 7 pieces over 16 days (4 articles · 3 posts) Oct 27, 1 AM — 1 piece · 1 article — Google News 1Oct 27, 5 AM — quietOct 27, 9 AM — quietOct 27, 1 PM — quietOct 27, 5 PM — quietOct 27, 9 PM — quietOct 28, 1 AM — quietOct 28, 5 AM — quietOct 28, 9 AM — 2 pieces · 2 articles — Google News 1, Newswires 1Oct 28, 1 PM — quietOct 28, 5 PM — 2 pieces · 2 posts — Mastodon 2Oct 28, 9 PM — quietOct 29, 1 AM — quietOct 29, 5 AM — quietOct 29, 9 AM — 1 piece · 1 article — Newswires 1Oct 29, 1 PM — quietOct 29, 5 PM — quietOct 29, 9 PM — quietOct 30, 1 AM — quietOct 30, 5 AM — 1 piece · 1 post — Mastodon 1Oct 30, 9 AM — quietOct 30, 1 PM — quietOct 30, 5 PM — quietOct 30, 9 PM — quietOct 31, 1 AM — quietOct 31, 5 AM — quietOct 31, 9 AM — quietOct 31, 1 PM — quietOct 31, 5 PM — quietOct 31, 9 PM — quietNov 1, 1 AM — quietNov 1, 4 AM — quietNov 1, 8 AM — quietNov 1, 12 PM — quietNov 1, 4 PM — quietNov 1, 8 PM — quietNov 2, 12 AM — quietNov 2, 4 AM — quietNov 2, 8 AM — quietNov 2, 12 PM — quietNov 2, 4 PM — quietNov 2, 8 PM — quietNov 3, 12 AM — quietNov 3, 4 AM — quietNov 3, 8 AM — quietNov 3, 12 PM — quietNov 3, 4 PM — quietNov 3, 8 PM — quietNov 4, 12 AM — quietNov 4, 4 AM — quietNov 4, 8 AM — quietNov 4, 12 PM — quietNov 4, 4 PM — quietNov 4, 8 PM — quietNov 5, 12 AM — quietNov 5, 4 AM — quietNov 5, 8 AM — quietNov 5, 12 PM — quietNov 5, 4 PM — quietNov 5, 8 PM — quietNov 6, 12 AM — quietNov 6, 4 AM — quietNov 6, 8 AM — quietNov 6, 12 PM — quietNov 6, 4 PM — quietNov 6, 8 PM — quietNov 7, 12 AM — quietNov 7, 4 AM — quietNov 7, 8 AM — quietNov 7, 12 PM — quietNov 7, 4 PM — quietNov 7, 8 PM — quietNov 8, 12 AM — quietNov 8, 4 AM — quietNov 8, 8 AM — quietNov 8, 12 PM — quietNov 8, 4 PM — quietNov 8, 8 PM — quietNov 9, 12 AM — quietNov 9, 4 AM — quietNov 9, 8 AM — quietNov 9, 12 PM — quietNov 9, 4 PM — quietNov 9, 8 PM — quietYesterday, 12 AM — quietYesterday, 4 AM — quietYesterday, 8 AM — quietYesterday, 12 PM — quietYesterday, 4 PM — quietYesterday, 8 PM — quietToday, 12 AM — quietToday, 4 AM — quietToday, 8 AM — quietToday, 12 PM — quietToday, 4 PM — quietToday, 8 PM — quiet 1234
Oct 28Oct 30Nov 1Nov 3Nov 5Nov 7Nov 9now · 9:14 PM ET
  1. 4

    ZDNet urges immediate update for both browsers

    ZDNet's follow-up confirms the vulnerability counts — 167 in Firefox (mostly high severity) and 52 in Chrome (four critical) — and recommends users update both browsers as soon as possible.

    1. 1 outlet Firefox and Chrome patch 200+ security flaws combined – update both ASAP

      first by ZDNet, 13d ago

    • beyondmachines1@infosec.exchange

      Google Patches 52 Chrome Vulnerabilities, Four Critical Google released a security update for Chrome version 156.0.8078.73/.74 to fix 52 vulnerabilities, including four critical flaws. The update patches use-after-free and memory corruption across core browser components like V8, Skia, and FileSystem. **A smaller but critical Chrome/Chromium…

      beyondmachines1@infosec.exchangeMastodon12d agoview on Mastodon ↗
  2. 3

    Security community shares the patch news on social platforms

    Infosec users on Mastodon reposted and reacted to the SecurityWeek coverage of the combined 200-plus-bug patch round.

    “Wow! The headline and subhead from an article on Cyber AI: “Chrome and Firefox Updates Patch Over 200 Vulnerabilities…”
    — KOKEdit@mastodon.social
    • KOKEdit@mastodon.social

      Wow! The headline and subhead from an article on Cyber AI: “Chrome and Firefox Updates Patch Over 200 Vulnerabilities “The Chrome 156 update fixes 52 bugs, while Firefox 159 was rolled out with 167 security patches” https://www. securityweek.com/chrome-and-fi refox-updates-patch-over-200-vulnerabilities/

      KOKEdit@mastodon.socialMastodon14d agoview on Mastodon ↗
  3. 2

    SecurityWeek details the critical Chrome flaw and bounty status

    Reporting highlights CVE-2026-118306, a FileSystem memory-corruption bug exploitable via a crafted HTML page for sandbox-escaping code execution, and notes Google has not yet set bounty payouts, with 39 of the fixed bugs found internally or with AI assistance and thus ineligible for reward.

    1. 2 outlets Firefox and Chrome patch 200+ security flaws combined

      first by Yahoo Tech, 14d ago · also SecurityWeek

      1 more headline
  4. 1

    Google and Mozilla ship Chrome 156 and Firefox 159

    Chrome 156 patches 52 bugs including four critical-severity flaws (memory corruption in FileSystem, input validation issues in FileAPI and Skia, use-after-free in Layout); Firefox 159 patches 167 defects including 108 high-severity ones, mostly use-after-free issues. Mozilla also released Thunderbird 159/153.6 and Firefox ESR 153.6/115.44 with related fixes.

What people are saying 0 voices from 0 sites · best of 2 · verbatim