SecOraLens
CriticalMalware

Chrome and Firefox updates fix serious security flaws. Install them now

Malwarebytes Labs·Source published ·1 min read

What happened?

On October 27, Google issued a new Stable channel update for Chrome. Most users are on Chrome’s Stable channel. The desktop update brings Chrome to versions 156.0.8078.73/.74 for Windows and Mac and 156.0.8078.73 for Linux. The update includes 52 security fixes, including four rated Critical. On the same day, Mozilla issued Security Advisory 2026-118, which fixes 167 vulnerabilities. Firefox 159 also introduces several new features. Both updates will roll out over the coming days and weeks. How to update Chrome The easiest option is to allow Chrome to update automatically.

Key details

  • Google released Chrome Stable update with 52 security fixes including four Critical rated vulnerabilities.
  • Mozilla issued Firefox Security Advisory 2026-118 addressing 167 vulnerabilities in Firefox 159.
  • Both browser updates fix use-after-free memory handling flaws in layout, JavaScript, and SVG processing.
  • Use-after-free bugs can cause crashes or potentially allow attackers to execute arbitrary code.
  • OpenAI Codex Security is credited by both Google and Mozilla for discovering bugs fixed in these releases.
  • Mozilla collaborated with Anthropic to validate AI-discovered vulnerabilities before reporting them.
  • Chrome and Firefox updates will roll out gradually over coming days and weeks to users.

Affected

  • Chrome versions prior to 156.0.8078.73/.74 on Windows/Mac and 156.0.8078.73 on Linux.

Fixes and mitigations

  1. Update Chrome via About Google Chrome in settings or Help menu, then click Relaunch.
  2. Update Firefox via Help > About Firefox, wait for download, then click Relaunch.

Summarised by SecOraLens from Malwarebytes Labs. Always read the original source before acting. How SecOraLens verifies advisories.