Google and Mozilla have issued urgent patches for Chrome and Firefox to address dozens of critical and high-severity security vulnerabilities. Users are urged to update their browsers immediately to prevent potential exploits.
- Google released Chrome 152 to fix 26 bugs, including two critical issues.
- Mozilla patched 29 security defects in Firefox 155.
- Vulnerabilities include 'use-after-free', 'sandbox escape', and 'memory corruption'.
- No evidence of active exploitation in the wild has been reported so far.
In a major move to bolster web security, Google and Mozilla announced on Tuesday that they have released critical patches for dozens of vulnerabilities affecting Chrome and Firefox. These updates address a range of security flaws, from medium-severity issues to critical-level defects that could allow attackers to compromise user systems.
Chrome Update: Addressing Critical Flaws
The latest Chrome 152 update targets 26 distinct bugs. Most notably, it fixes two critical-severity 'use-after-free' vulnerabilities: CVE-2026-84353 in Shared Tab Groups and CVE-2026-84352 in WebGL. Beyond these critical threats, the update resolves nine high-severity defects, including improper input validation, information leaks, and buffer overflows. This update is rolling out across Windows, macOS, and Linux platforms.
Why This Matters
BozokMedia analysis shows that browser vulnerabilities are a primary vector for large-scale cyberattacks. When a browser suffers from a 'sandbox escape' or 'use-after-free' flaw, the boundary between the web and your local machine thins, potentially allowing malicious code to execute with high privileges on your device.
The window between a vulnerability being disclosed and an exploit being developed is shrinking, making immediate patching a necessity.
Mozilla has followed suit with Firefox 155, which includes fixes for 29 security defects. Among these, 13 are classified as high-severity, involving memory corruption and sandbox escape vulnerabilities. These flaws are particularly dangerous as they could allow an attacker to bypass the browser's security layers. Mozilla also extended these fixes to Firefox ESR and Thunderbird email clients to ensure comprehensive coverage for enterprise and extended-support users.
| Browser | Bugs Patched | Primary Risk Type |
|---|---|---|
| Google Chrome | 26 | Use-after-free, Buffer Overflow |
| Mozilla Firefox | 29 | Sandbox Escape, Memory Corruption |
While the severity of these bugs is high, both tech giants have noted that there is currently no evidence suggesting these vulnerabilities are being exploited in the wild. However, the release of these patches often acts as a roadmap for bad actors to study and weaponize the very flaws being fixed.
Frequently Asked Questions
1. How do I know if my Chrome is updated?
Go to Settings > About Chrome to check your version and trigger an update if needed.
2. Are these vulnerabilities being used by hackers right now?
Currently, there are no reports of these specific bugs being exploited in active attacks.
