Google and Mozilla on Tuesday announced fresh Chrome and Firefox security updates that address multiple critical- and high-severity vulnerabilities.
Firefox 154 was released to the stable channel with patches for 58 CVEs, including 20 high-severity flaws, roughly half of which are memory safety bugs that could be exploited for code execution.
Resolved high-severity issues include six use-after-free defects, six privilege escalation vulnerabilities, two information disclosure bugs, one sandbox escape flaw, one site isolation issue, and one mitigation bypass weakness.
Per Mozilla’s advisory, the update also resolves multiple internally discovered bugs leading to memory corruption and other security-related defects that could have been exploited. They were collectively assigned three CVEs.
On Tuesday, Mozilla also announced the rollout of Thunderbird 154 with patches for 55 vulnerabilities. Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 140.14, and Thunderbird 153.1 were also released with fixes for dozens of these security defects.
Google released a fresh Chrome 151 update that resolves 15 vulnerabilities, including two critical-severity buffer overflow bugs in WebGL and Dawn.
The remaining 13 flaws are high-severity inappropriate implementation, link following, race condition, incorrect reference resolution, use-after-free, use of uninitialized resource, buffer overflow, incorrect calculation, information leak, and type confusion issues.
Google says it found 11 of these security defects, while the other four were discovered and reported by external researchers. The company has yet to disclose the bug bounty amounts to be paid.
The latest Chrome release is now rolling out to users as versions 151.0.7922.169/.170 for Windows and macOS, and as version 151.0.7922.169 for Linux.
Related: AI-Driven Vulnerability Surge Breaks the Traditional Patching Model
Related: 300,000 WordPress Sites Potentially Exposed to Hacking Due to Form Plugin Flaw
Related: GitLab Patches Critical Code Injection Vulnerability
Related: Dozens of WebKit Vulnerabilities Patched With Fresh macOS, iOS Security Updates