Security1 hOctober 28, 2026, 20:39

Chrome 156 and Firefox 159 Patch Over 200 Vulnerabilities

Google and Mozilla released browser updates fixing more than 200 security flaws: Chrome 156 patches 52 defects, including four critical ones, while Firefox 159 resolves 167 issues, 108 of them high-severity. The critical FileSystem bug CVE-2026-118306 allowed code execution outside the sandbox. Neither vendor reported exploitation in the wild.

SecurityWeek

Open source

Chrome 156 and Firefox 159 Patch Over 200 Vulnerabilities

Chrome 156 fixes 52 flaws, including 4 critical and 46 high-severity bugs
CVE-2026-118306 in Chrome FileSystem allowed code execution outside the sandbox
Firefox 159 patches 167 defects, 108 high-severity, mostly use-after-free
Thunderbird 159 and Firefox ESR 153.6 and 115.44 also received fixes

#Google#Chrome#Mozilla#Firefox

CA distrust only protects a client once its verifier consumes the update

Software

Firefox is working on a privacy feature Chrome and Edge still don't have on Windows

Software

Mozilla Firefox 159 Enters Public Beta Testing with Wayland Improvements

Security

Chrome 156 and Firefox 159 Patch Over 200 Vulnerabilities

CA distrust only protects a client once its verifier consumes the update

Firefox is working on a privacy feature Chrome and Edge still don't have on Windows

Mozilla Firefox 159 Enters Public Beta Testing with Wayland Improvements

eMudhra exits SSL certificate business after private keys cracked in under a second