Google and Mozilla browser security updates

Google and Mozilla released significant security updates for Chrome and Firefox to address numerous vulnerabilities. Initially, Google released Chrome 156 to address 353 vulnerabilities, including six high-severity flaws related to memory corruption and use-after-free issues. During the same period, Mozilla issued an update for Firefox 158.0.1 to address several security vulnerabilities and resolve functional bugs.

Subsequent updates expanded on these security patches. Google’s Chrome 156 update was noted to include patches for 52 security defects, including four critical-severity flaws. One specific bug, CVE-2026-118306, was identified as potentially allowing arbitrary code execution outside the sandbox. Mozilla released Firefox 159 to patch 167 security defects, including 108 high-severity flaws involving sandbox escapes and privilege escalation.

The Indian Computer Emergency Response Team (CERT-In) issued a critical-severity warning regarding the Chrome flaws, stating that attackers could exploit them to execute arbitrary code, steal sensitive data, or cause denial-of-service conditions. While no exploitation in the wild had been reported, both companies advised immediate updates.