Chrome and Firefox Updates Patch Over 200 Vulnerabilities

Google and Mozilla have each shipped major browser updates this week, together closing out more than 200 security issues. Chrome 156 (versions 156.0.8078.73/.74 on Windows/macOS and 156.0.8078.73 on Linux) addresses 52 flaws, among them four critical ones such as a FileSystem memory-corruption bug tracked as CVE-2026-118306, which could let an attacker run code outside the browser sandbox via a malicious webpage, plus input-validation issues in FileAPI and Skia and a use-after-free in Layout. Firefox 159, alongside Thunderbird 159/153.6 and Firefox ESR 153.6/115.44, fixes 167 vulnerabilities, 108 of them rated high severity, mostly use-after-free bugs along with sandbox-escape, privilege-escalation and same-origin-policy bypass problems. Neither vendor reports active exploitation of these issues, but all users are urged to install the updates promptly.