Fresh Chrome Firefox updates are rolling out after security teams from Google and Mozilla identified multiple vulnerabilities across their web browsers. The updates focus on critical and high-severity issues, including memory safety defects that can be particularly dangerous because they may enable attackers to execute code.
If you use Chrome, Firefox, or related Mozilla products, updating soon is a straightforward way to lower risk. Below is what the latest releases cover and how the fixes are distributed across versions.
Firefox 154: 58 CVEs patched on the stable channel
Mozilla released Firefox 154 to the stable channel with patches for 58 CVEs. Of these, 20 are rated high severity. A significant portion of the high-severity items—about half—are memory-safety bugs that could be exploited for code execution if an attacker can trigger the vulnerable behavior in a targeted way.
Mozilla also lists a range of high-severity issue types resolved in this update. Examples include use-after-free vulnerabilities, several privilege escalation flaws, and problems that can result in information disclosure. The advisory further notes fixes such as a sandbox escape weakness, a site isolation issue, and a mitigation bypass problem.
Internally discovered bugs also fixed
In addition to the publicly cataloged issues, Mozilla’s advisory indicates the update addresses multiple internally discovered bugs. These relate to memory corruption and other security-relevant defects that could potentially be exploited.
In total, these internal findings were collectively assigned three CVEs, which were included in the overall vulnerability count for Firefox 154.
Thunderbird 154 and multiple ESR releases get fixes
The security work is not limited to Firefox alone. Mozilla also announced the rollout of Thunderbird 154, which includes patches for 55 vulnerabilities.
Alongside the standard releases, several Firefox ESR and Thunderbird ESR versions were updated with fixes for dozens of security defects. Mozilla released fixes for:
- Firefox ESR 115.39
- Firefox ESR 140.14
- Firefox ESR 153.1
- Thunderbird 140.14
- Thunderbird 153.1
For organizations and users who rely on ESR channels for stability, these updates are important because they extend the protection window for older deployments.
Chrome 151: 15 vulnerabilities fixed, including critical WebGL issues
On the Google side, a new Chrome update was published to resolve 15 vulnerabilities. Among them are two critical-severity buffer overflow bugs involving WebGL and Dawn.
Buffer overflows can be especially high impact because they may allow attackers to corrupt memory and potentially gain control of a target system, depending on exploitability and available mitigations.
Additional high-severity bug classes patched in Chrome
Beyond the critical issues, Google reports that the remaining 13 flaws are high severity. The disclosed categories include a variety of bug patterns that frequently show up in browser security research, such as:
- inappropriate implementation
- link following issues
- race condition problems
- incorrect reference resolution
- use-after-free defects
- use of uninitialized resources
- buffer overflow cases
- incorrect calculations
- information leak vulnerabilities
- type confusion issues
Google notes that it found 11 of these security defects, while four were discovered and reported by external researchers. At the time of the announcement, Google had not disclosed the bug bounty amounts to be paid.
Rollout details for Chrome versions
The latest Chrome release is now gradually rolling out. Google lists the updates for different operating systems as:
- Windows and macOS: 151.0.7922.169 / 151.0.7922.170
- Linux: 151.0.7922.169
Because browser updates can be staged, you may not see the change immediately. If automatic updates are enabled, you should receive the patch during the normal rollout window.
Why memory-safety issues matter for browser security
Modern browsers process untrusted content from websites, which makes vulnerabilities in areas like rendering, JavaScript execution, sandboxing, and graphics particularly relevant. The reports for both vendors emphasize memory-safety problems—such as use-after-free and memory corruption—that can sometimes be exploited to achieve code execution.
Even if only a subset of flaws are easily exploitable in the real world, staying current reduces the chance that attackers can target known weaknesses.
What you should do next
To benefit from the protections in these releases, focus on updating your browsers and related applications:
- Update Chrome to the latest available version so you receive the fixes for the 15 reported vulnerabilities.
- Update Firefox (or your configured ESR build) so Firefox 154 and the ESR/related Thunderbird fixes are applied.
- Apply changes on endpoints—if you manage devices, make sure browser updates are included in your patch schedule.
If you’re unsure whether an update is installed, check the browser’s version page and compare it with the release numbers mentioned above.
Staying ahead with faster patch cycles
Browser security updates often arrive in clusters because complex systems reveal multiple issues over time. The best defense is usually not a one-time action, but an ongoing patching routine that keeps systems aligned with vendor security releases.
With these Chrome Firefox updates, both major browser teams have addressed a mix of critical and high-severity vulnerabilities, including memory corruption risks and graphics-related buffer overflow flaws.
Conclusion
The newest releases from Google and Mozilla provide timely fixes for dozens of vulnerabilities across Chrome, Firefox, and related Mozilla products. Firefox 154 patches 58 CVEs, including high-severity memory-safety bugs and other serious issue types, while Thunderbird updates extend protection to the email client. Chrome 151 resolves 15 vulnerabilities, including critical WebGL and Dawn buffer overflows.
Updating now is the practical step that helps reduce exposure to known vulnerabilities and keeps your browser environment safer.
Source: https://www.securityweek.com/chrome-firefox-updates-patch-dozens-of-vulnerabilities/
