Chrome and Firefox updates fix 114 flaws, including seven critical Chrome bugs

Google and Mozilla released browser security updates on Tuesday, October 13, fixing a combined 114 vulnerabilities in Chrome and Firefox, according to SecurityWeek. The Chrome update resolves seven critical-severity bugs, while Firefox 158 alone addresses 77 security issues. SecurityWeek reported no known in-the-wild exploitation of any of the fixed flaws, but the volume and severity make prompt updating advisable for both home and enterprise users.

What happened

Google released Chrome 155.0.8059.79 and 155.0.8059.80 for Windows and macOS and 155.0.8059.79 for Linux with 37 security fixes, SecurityWeek said. Mozilla published Firefox 158 along with Firefox ESR 153.5 and 115.43 and Thunderbird 158 and 153.5, according to its security advisories page (MFSA 2026-106 to 2026-110).

Technical details

According to SecurityWeek, the seven critical Chrome issues are a buffer overflow in the ANGLE graphics layer and six use-after-free bugs in the Browser, PDF, Network, Core, SVG and Media components. Of the remaining fixes, 29 are rated high, mostly use-after-free bugs, and one is rated medium. Google did not publish CVE identifiers for the critical bugs in the material SecurityWeek cited. The publication said at least 15 of the bugs were reported by Xinyang Ge of Anthropic, assisted by Claude, with no bounty paid, and that Google's own teams found 12.

Firefox 158 fixes 77 security issues, 30 of them high-severity, SecurityWeek reported. The classes include use-after-free, sandbox escape, privilege escalation, information disclosure, JIT miscompilation and integer overflow bugs. Mozilla found 40 of the issues internally and Amy Burnett of OpenAI reported 9.

Separately, Mozilla announced Firefox Enterprise on October 12, a browser edition with a self-hosted management console to control policies, access, data transfers and AI use. Google also announced higher bug bounty rewards for some Chrome vulnerability classes the same day as the update.

What to do

Users should restart Chrome to apply version 155.0.8059.79 or later and update Firefox to version 158. Organizations on extended support channels should deploy Firefox ESR 153.5 or 115.43, and Thunderbird users should move to 158 or 153.5. Administrators managing Chromium-based browsers from other vendors should watch for corresponding updates.