[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fghLdUUi_tLCOSk4bNUw4zSBut2KcHDz0YPGOY7-yKY0":3},{"article":4,"iocs":39,"watch_terms":40,"solutions":41,"lesson":78},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":31,"category":32,"article_tags":36},"aa7fee01-b1ac-4d1f-a75e-3aa74982a127","Chrome, Firefox Updates Patch Over 180 Vulnerabilities","chrome-firefox-updates-patch-over-180-vulnerabilities-16dd8d","Google fixed 83 flaws with a new Chrome 157 release, and Mozilla addressed 99 bugs in Firefox 160. The post Chrome, Firefox Updates Patch Over 180 Vulnerabilities appeared first on SecurityWeek.","Google released Chrome 157 with fixes for 83 vulnerabilities, including five critical-severity use-after-free issues. Mozilla addressed 99 bugs in Firefox 160, with most being high-severity weaknesses. Thunderbird also received updates with numerous patches. No exploitation in the wild has been reported for these specific vulnerabilities.","Chrome and Firefox updates patch over 180 vulnerabilities, including critical flaws.","https:\u002F\u002Fwww.securityweek.com\u002Fchrome-firefox-updates-patch-180-vulnerabilities\u002F","https:\u002F\u002Fwww.securityweek.com\u002Fwp-content\u002Fuploads\u002F2025\u002F01\u002FChrome-Firefox.jpeg","2026-11-12T13:42:09+00:00","2026-11-12T14:00:18.701778+00:00",7,[17,20,23,25,27,29],{"name":18,"type":19},"Chrome","product",{"name":21,"type":22},"Google","vendor",{"name":24,"type":19},"Firefox",{"name":26,"type":22},"Mozilla",{"name":28,"type":19},"Thunderbird",{"name":30,"type":22},"Anthropic","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":31,"icon":33,"name":34,"slug":35},null,"Vulnerabilities","vulnerabilities",[37],{"category":38},{"id":31,"icon":33,"name":34,"slug":35},[],[21,26,30],{"controls":42,"vendors":72},[43],{"slug":44,"name":45,"problem":46,"products":47},"patch-management","Automated patch management","Known holes get closed in days, not months.",[48,56,64],{"vendor_slug":49,"vendor_name":50,"vendor_logo":51,"product_slug":52,"product_name":53,"url":54,"description":55},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",{"vendor_slug":57,"vendor_name":58,"vendor_logo":59,"product_slug":60,"product_name":61,"url":62,"description":63},"action1","Action1","\u002Fvendor-logos\u002Faction1.png","action1-patch-management","Action1 Patch Management","https:\u002F\u002Fwww.action1.com\u002F","Cloud-native patch management for Windows, macOS and third-party applications.",{"vendor_slug":65,"vendor_name":66,"vendor_logo":67,"product_slug":68,"product_name":69,"url":70,"description":71},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",[73],{"slug":74,"name":21,"logo_path":75,"roles":76},"google","\u002Fvendor-logos\u002Fgoogle.png",[77],"affected",{"slug":79,"title":80,"body":81,"framework_refs":82,"framework_notes":88},"180-browser-vulnerabilities-highlight-the-need-for-rapid-patch-deployment","180+ Browser Vulnerabilities Highlight the Need for Rapid Patch Deployment","Google and Mozilla released major updates patching over 180 vulnerabilities across Chrome and Firefox, including critical use-after-free flaws that could allow attackers to execute arbitrary code or crash affected systems. While no active exploitation has been reported yet, the window between patch release and attacker weaponization is often very short — sometimes measured in days. Organizations that delay browser updates expose users to serious risk, since browsers are a primary attack surface for phishing, drive-by downloads, and credential theft. Keeping browsers current is one of the most impactful and lowest-cost security controls available to any organization.",[83,84,85,86,87],"CIS Control 7: Continuous Vulnerability Management (v8)","CIS Control 2: Inventory and Control of Software Assets (v8)","NIST SP 800-53 SI-2: Flaw Remediation","NIST CSF 2.0 RS.MI-3: Newly identified vulnerabilities are mitigated or documented as accepted risks","NIS2 Article 21(2)(e)",{"NIS2 Article 21(2)(e)":89,"NIST SP 800-53 SI-2: Flaw Remediation":90,"CIS Control 7: Continuous Vulnerability Management (v8)":91,"CIS Control 2: Inventory and Control of Software Assets (v8)":92,"NIST CSF 2.0 RS.MI-3: Newly identified vulnerabilities are mitigated or documented as accepted risks":93},"NIS2 Article 21(2)(e) mandates security in acquisition, development and maintenance including vulnerability handling, requiring covered entities to have processes to rapidly apply patches like these browser updates.","SI-2 requires organizations to identify, report, and correct information system flaws, and to install security-relevant software updates within organizationally defined time periods — directly applicable to these 180+ browser vulnerabilities.","CIS Control 7 requires organizations to continuously assess and remediate vulnerabilities — including browser software — on a risk-prioritized basis, which would ensure timely deployment of these critical patches.","Knowing exactly which browser versions are installed across all endpoints is a prerequisite to identifying and prioritizing which systems need the Chrome and Firefox updates.","This category requires that once vulnerabilities are disclosed — as they were here by Google and Mozilla — organizations act to mitigate them promptly or formally accept the risk."]