Recent security updates for Chrome and Firefox have been announced by Google and Mozilla, addressing a range of critical vulnerabilities that pose significant risks to users. These updates, released on Tuesday, underscore the ongoing efforts to safeguard browser integrity against potential cyber threats.
Firefox 154 Addresses Major Security Flaws
The latest version of Firefox, 154, has been rolled out to the stable channel, featuring patches for 58 Common Vulnerabilities and Exposures (CVEs). Notably, 20 of these are high-severity issues, many of which involve memory safety concerns that could allow for unauthorized code execution. The update also tackles six use-after-free bugs, six privilege escalation vulnerabilities, and other critical security threats.
Mozilla’s advisory highlights the resolution of several internally discovered bugs that could lead to memory corruption and other security vulnerabilities. These issues have been categorized under three distinct CVEs, reflecting the diverse nature of the threats addressed.
Thunderbird and Firefox ESR Updates Released
Alongside the Firefox update, Mozilla has released Thunderbird 154, which includes fixes for 55 vulnerabilities. The company has also updated Firefox ESR versions 115.39, 140.14, and 153.1, as well as Thunderbird 140.14 and 153.1, further enhancing the security framework of these applications.
These updates are crucial for maintaining the security of Mozilla’s applications, ensuring that users are protected against a wide array of potential exploits.
Chrome 151 Enhances Security with Critical Patches
Google has issued the Chrome 151 update, addressing 15 vulnerabilities, including two critical buffer overflow bugs in WebGL and Dawn. The remaining 13 flaws, categorized as high-severity, involve inappropriate implementation, race conditions, and other significant security issues.
Of these vulnerabilities, 11 were identified by Google’s internal team, while external researchers reported the remaining four. The exact bug bounty rewards for these discoveries have yet to be disclosed.
Users are encouraged to update to the latest Chrome version 151.0.7922.169/.170 for Windows and macOS, and 151.0.7922.169 for Linux, to benefit from these critical security enhancements.
The ongoing updates from both Google and Mozilla highlight the importance of staying current with software patches to protect against evolving cyber threats. As these companies continue to address vulnerabilities, users can expect enhanced protection and improved browser performance in the future.
