Google and Mozilla have released security updates for Chrome and Firefox that collectively address more than 100 vulnerabilities. Neither company reported known exploitation of the patched issues, but several flaws could enable code execution, privilege escalation or escape from browser security boundaries.
The releases include critical memory-safety fixes
Chrome’s update resolves 32 security defects, including a critical buffer overflow in ANGLE tracked as CVE-2026-102331 and numerous high-severity use-after-free, uninitialized-resource and type-confusion weaknesses. Firefox 157 addresses roughly 76 vulnerabilities, with fixes also delivered in supported ESR branches. Mozilla’s high-severity set includes use-after-free, sandbox escape, privilege escalation, information disclosure and JIT compilation issues.
Enterprise rollout must cover managed and unmanaged paths
Organizations should confirm that automatic updates reached all supported desktop platforms and that long-lived kiosks, operator stations and jump hosts did not remain on older channels. Browser version reporting should be reconciled with endpoint inventory, while web applications and security consoles should be smoke-tested after update. Where browsers support operational security workflows, rollback planning must not become a reason to delay critical fixes. SectechMedia’s guide to security-system acceptance testing illustrates the evidence-based approach needed after software changes.
Leave a Reply