Vulnerabilities & CVEs SecurityWeek 1 month ago

Chrome, Firefox Updates Patch 115 Vulnerabilities

CN
CyberNew Threat Research Desk
• Original Reporting: SecurityWeek
CyberNew Threat Intel Assessment
Assessed Severity: CRITICAL
Impacted Surface
Cloud & Distributed Infrastructure
Intelligence Sector
Vulnerabilities & CVEs

Analyst Takeaway

"Google and Mozilla have released fresh security updates for Chrome and Firefox users, resolving a total of 115 vulnerabilities. The new Chrome 153 release patches 42 security defects, including three critical-severity and 28 high-severity bugs. The critical flaws include CVE-2026-91726, an out-of-bounds read in WebGL, and CVE-2026-91721 and CVE-2026-91749, use-after-free issues in Internals and..."

Recommended Defense & Mitigation

  • Emergency Patching: Prioritize vendor patches and CVE mitigation across internet-facing assets immediately.
  • Perimeter Audit: Inspect perimeter firewall logs and hunt for unauthorized RCE indicators.
Curated & Verified by CyberNew Threat Intelligence Desk Standard Defense Framework (NIST / MITRE ATT&CK)
Chrome and Firefox vulnerabilities

Google and Mozilla have released fresh security updates for Chrome and Firefox users, resolving a total of 115 vulnerabilities.

The new Chrome 153 release patches 42 security defects, including three critical-severity and 28 high-severity bugs.

The critical flaws include CVE-2026-91726, an out-of-bounds read in WebGL, and CVE-2026-91721 and CVE-2026-91749, use-after-free issues in Internals and Workers, respectively.

Google also resolved multiple high-severity use-after-free, race condition, type confusion, integer overflow, incorrect authorization, and uninitialized resource weaknesses.

Of the resolved vulnerabilities, 16 were reported by external researchers, but Google has yet to disclose 14 of the bug bounty amounts it paid out. Only two rewards totaling $2,500 were disclosed.

The latest Chrome iteration is now rolling out as versions 153.0.8010.47/.48 for Windows and macOS, and as version 153.0.8010.47 for Linux.

Advertisement. Scroll to continue reading.

Mozilla announced the release of Firefox 156 with fixes for 73 vulnerabilities, including 29 high-severity bugs.

Written By Ionut Arghire

Source Verification & Original Intelligence

This threat report was reviewed by CyberNew analysts and cross-referenced with primary security disclosures from SecurityWeek.

Primary Advisory →