Google and Mozilla released browser security updates this week that together fix more than 180 vulnerabilities. Chrome 157 fixes 83 flaws, including five critical use-after-free issues in ServiceWorker, CSS, Layout, Skia and Accessibility. The other 78 are rated high severity.
According to SecurityWeek, Google found 52 of the flaws internally, and 18 more were reported by researchers at Anthropic and OpenAI, who will not receive a reward for them. The update is rolling out as versions 157.0.8103.78/.79 for Windows and macOS and 157.0.8103.78 for Linux.
Firefox 160 fixes 99 flaws, 57 of them high severity, including sandbox escape and same-origin policy bypass issues. Mozilla also fixed most of them in Thunderbird 160, and released updates for Firefox ESR 153.7, ESR 115.45 and Thunderbird 153.7.
Google and Mozilla made no mention of any of the flaws being exploited. Users should make sure their browser has updated and restart it.