591/69 Thursday, October 29, 2026
Google and Mozilla have released security updates for Chrome 156 and Firefox 159, addressing more than 200 vulnerabilities in total. Chrome 156 fixes 52 security issues, including four rated Critical, while Firefox 159 addresses 167 vulnerabilities, 108 of which are rated High severity. At the time of disclosure, neither Google nor Mozilla reported evidence that vulnerabilities included in these updates had been exploited in the wild.
The Critical vulnerabilities in Chrome include Memory Corruption issues in FileSystem, Improper Input Validation flaws in FileAPI and Skia, and a Use-After-Free vulnerability in Layout. In particular, CVE-2026-118306 in FileSystem could potentially allow an attacker to execute code outside the browser sandbox through a specially crafted HTML page. Firefox 159 also fixes multiple vulnerability classes, including Use-After-Free, Sandbox Escape, Privilege Escalation, and Same-Origin Policy Bypass issues, which could lead to data access, sandbox escape, or execution with elevated privileges depending on the specific vulnerability and exploitation conditions.
Chrome users should update to version 156.0.8078.73/.74 on Windows and macOS, and 156.0.8078.73 on Linux, or later versions. Firefox users should update to Firefox 159 as soon as possible. Organizations should verify that browsers on managed devices have received the latest security patches and enable automatic updates where appropriate to reduce exposure to attacks exploiting browser vulnerabilities.
Source: https://www.securityweek.com/chrome-and-firefox-updates-patch-over-200-vulnerabilities/