Firefox and Chrome Release Patches for 200+ High‑Severity Flaws – Immediate Updates Recommended
What Happened — Mozilla released Firefox 159 and Google released Chrome 56.0.8078.73, together addressing 167 and 52 security flaws respectively. Over 100 of Firefox’s bugs are use‑after‑free memory errors, and several affect the browser sandbox, allowing potential code execution. Chrome’s update includes four critical vulnerabilities. Both vendors urge users to install the updates immediately to close these attack surfaces.
Why It Matters for Trust & Control Assurance — The flurry of high‑severity bugs underscores the need for a robust patch‑management control that provides continuous evidence of timely remediation.
Who Is Affected — All organizations that rely on modern web browsers across any industry, especially those with endpoint‑security programs.
Recommended Actions
- Verify that all workstations, servers, and mobile devices run the latest Firefox 159 and Chrome 56.0.8078.73 releases.
- Integrate browser version checks into your configuration‑management database (CMDB) and automate remediation alerts.
- Document the update process and retain logs as audit evidence of vulnerability remediation.
Technical Notes — The majority of Firefox flaws are use‑after‑free (UAF) memory‑management bugs; some bypass the browser sandbox. Chrome’s critical issues include memory‑corruption and privilege‑escalation paths. No CVE identifiers were disclosed in the source article. Source: ZDNet Security