Chrome and Firefox Patch Over 100 Security Flaws, Mozilla Launches Firefox Enterprise

Major Browser Updates Fix Dozens of Security Flaws

Google and Mozilla have both released important updates for their web browsers, Chrome and Firefox. According to SecurityWeek↗ (opens in a new tab), these updates address a combined total of 114 security vulnerabilities. While Google fixed 37 issues in Chrome, Mozilla patched 77 flaws in Firefox. Many of these vulnerabilities were rated as high or critical severity.

What Was Fixed in Chrome and Firefox

The Chrome update, now available as version 155.0.8059.79/.80 for Windows and macOS and 155.0.8059.79 for Linux, includes fixes for seven critical memory problems. These include a buffer overflow in ANGLE (a graphics library) and six use-after-free issues. A use-after-free bug happens when a program tries to use computer memory after it has been released, which can let attackers run malicious code or crash the browser. Most of the high-severity bugs in Chrome were also use-after-free flaws. Google found 12 of the security defects itself, while at least 15 were reported by a researcher from Anthropic, with help from Claude, an AI system.

Mozilla’s Firefox 158 update addresses 77 security issues, including 30 high-severity bugs. These range from use-after-free and sandbox escape (where code breaks out of a restricted area), to privilege escalation (gaining higher access than intended), information disclosure, and other memory-related problems. Mozilla and Amy Burnett of OpenAI discovered most of these flaws. The update also covers Thunderbird (Mozilla’s email client) and Firefox ESR (a version for organisations), patching many of the same vulnerabilities.

Introduction of Firefox Enterprise

Alongside these updates, Mozilla announced Firefox Enterprise. This is a new version of the browser designed for organisations with strict security, compliance, and governance needs. Firefox Enterprise includes a management console that lets IT teams control browser policies, manage data transfers, and oversee AI use. Mozilla says this gives organisations more control over where their data lives and how it moves, without having to rely on a single browser engine or vendor. The management tools are designed to work with existing systems like identity providers, SIEM (Security Information and Event Management), and MDM (Mobile Device Management).

What Users and Organisations Should Do

If you use Chrome or Firefox, update your browser as soon as possible to get the latest security fixes. For organisations, Mozilla’s new Firefox Enterprise may be worth evaluating if you need more control over browser security and compliance. IT and security teams should review the update notes and consider how these changes affect their environments. Keeping browsers up to date is a key part of reducing the risk from known vulnerabilities.

What’s Not Yet Clear

At the time of writing, these updates have only been reported by SecurityWeek and have not been confirmed by Google or Mozilla through their official channels. Details about whether any of these vulnerabilities have been exploited in the wild are not available. Organisations should watch for further advisories from the browser vendors.