Chrome, Firefox Updates Patch 114 Flaws as Mozilla Unveils Firefox Enterprise
Chrome and Firefox updates patch 114 vulnerabilities, while Mozilla launches Firefox Enterprise.
Run Mozilla?
Get an email when a reviewed story names Mozilla, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
Summary
Google and Mozilla have released updates for Chrome and Firefox, addressing a total of 114 vulnerabilities. Chrome's update fixes 37 defects, including critical memory issues, while Firefox's update resolves 77 flaws. Concurrently, Mozilla has launched Firefox Enterprise, a new browser version tailored for organizations with stringent security, governance, and compliance needs, featuring a management console for enhanced control over policies and data usage.
The lesson from this incident
Full lessonGoogle and Mozilla have patched a combined 114 vulnerabilities across Chrome and Firefox, including critical memory-safety issues in Chrome that could allow attackers to execute arbitrary code or crash affected systems. Unpatched browsers represent one of the most common and exploitable attack surfaces in any organization, as end users interact with them constantly and they are frequently targeted via malicious websites, phishing links, and drive-by downloads. The sheer volume of flaws — 77 in Firefox alone — underscores that browser vendors continuously discover significant security gaps that require prompt remediation. Delaying browser updates, even briefly, leaves organizations exposed to exploitation of publicly disclosed vulnerabilities, which threat actors actively weaponize after patch release. The launch of Firefox Enterprise also signals a growing need for centralized browser governance in organizational environments.
What helps against this
How we list vendors- Vulnerability scanning and prioritisation
You know which systems are vulnerable, and which ones to fix first.
- Automated patch management
Known holes get closed in days, not months.
- Device management (MDM and UEM)
Every company laptop and phone is known, encrypted, locked down and up to date.