Google and Mozilla on Tuesday announced fresh Chrome and Firefox security updates that address multiple critical- and high-severity vulnerabilities.
Firefox 154 was released to the stable channel with patches for 58 CVEs, including 20 high-severity flaws, roughly half of which are memory safety bugs that could be exploited for code execution.
Resolved high-severity issues include six use-after-free defects, six privilege escalation vulnerabilities, two information disclosure bugs, one sandbox escape flaw, one site isolation issue, and one mitigation bypass weakness.
Per Mozilla’s advisory, the update also resolves multiple internally discovered bugs leading to memory corruption and other security-related defects that could have been exploited. They were collectively assigned three CVEs.
On Tuesday, Mozilla also announced the rollout of Thunderbird 154 with patches for 55 vulnerabilities. Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 140.14, and Thunderbird 153.1 were also released with fixes for dozens of these security defects.
Google released a fresh Chrome 151 update that resolves 15 vulnerabilities, including two critical-severity buffer overflow bugs in WebGL and Dawn.