Chrome and Firefox ship updates patching more than 180 vulnerabilities
Most of the flaws were found internally or reported by outside researchers, and neither vendor reports any in-the-wild exploitation.
Google and Mozilla have shipped browser security updates that together fix more than 180 vulnerabilities. Chrome's new builds, 157.0.8103.78 and .79 on Windows and macOS and 157.0.8103.78 on Linux, address 83 flaws, five of them critical use-after-free bugs in ServiceWorker, with the other 78 rated high severity. Google found 52 of these internally, while researchers from Anthropic and OpenAI reported 18 more; a $4,000 bounty was paid for one high-severity V8 use-after-free, and payouts for the remaining 12 external reports are still undecided. Mozilla's Firefox 160 patches 99 vulnerabilities, 57 of them high severity, and Thunderbird 160 brings 103 fixes. Neither vendor says any of the flaws has been exploited in the wild.
Why it matters
For people who rely on these browsers, the main point is the scale of the fixes and where they came from. Chrome's 83 flaws include five critical use-after-free bugs in ServiceWorker, and Firefox 160 and Thunderbird 160 add a further 99 and 103 fixes. Google found 52 of the Chrome issues itself, while outside researchers from Anthropic and OpenAI reported 18, showing that AI labs are now among those finding bugs in widely used browser code. Because neither vendor has said any of the flaws was exploited, the update is a precaution rather than a response to known attacks.
Matters or hype?
Does this story matter, or is it hype? Vote before you see what everyone else said.