[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fHioODlnfgULsK-sk_5C1Ft9h1_lhF6AWse3CRLXTKrE":3},{"lesson":4},{"id":5,"slug":6,"article_id":7,"title":8,"body":9,"prevention":10,"framework_refs":11,"framework_notes":20,"status":21,"created_at":22,"published_at":23,"article":24,"tags":28,"podcasts":41,"controls":42},"1039e17c-b3da-49b1-9f57-260e7d283557","114-vulnerabilities-patched-in-chrome-and-firefox-update-immediately","a771f4ba-2b95-46dc-9be3-ee078d512923","114 Vulnerabilities Patched in Chrome and Firefox — Update Immediately","Google and Mozilla have patched a combined 114 vulnerabilities across Chrome and Firefox, including critical memory-safety issues in Chrome that could allow attackers to execute arbitrary code or crash affected systems. Unpatched browsers represent one of the most common and exploitable attack surfaces in any organization, as end users interact with them constantly and they are frequently targeted via malicious websites, phishing links, and drive-by downloads. The sheer volume of flaws — 77 in Firefox alone — underscores that browser vendors continuously discover significant security gaps that require prompt remediation. Delaying browser updates, even briefly, leaves organizations exposed to exploitation of publicly disclosed vulnerabilities, which threat actors actively weaponize after patch release. The launch of Firefox Enterprise also signals a growing need for centralized browser governance in organizational environments.","**Immediate actions:**\n- Deploy the latest Chrome and Firefox updates across all endpoints within 24–48 hours of release using your patch management tool.\n- Audit all endpoints to confirm no outdated browser versions remain in use, prioritizing internet-facing and privileged workstations.\n\n**Long-term improvements:**\n- Implement automated browser patch deployment via endpoint management solutions (e.g., SCCM, Intune, or Jamf) to eliminate manual update delays.\n- Evaluate and adopt Firefox Enterprise or equivalent managed browser solutions to enforce organizational security policies and restrict unsafe configurations.\n- Maintain a formal software inventory that tracks browser versions across all devices to support rapid vulnerability response.\n\n**Detection measures:**\n- Configure vulnerability scanning tools to flag endpoints running browser versions with known CVEs within your regular scan cycles.\n- Establish alerting for browser crash telemetry or unusual memory-related process behavior that may indicate exploitation attempts.",[12,13,14,15,16,17,18,19],"CIS Control 7: Continuous Vulnerability Management","CIS Control 2: Inventory and Control of Software Assets","NIST SP 800-40 Rev. 4: Guide to Enterprise Patch Management Planning","NIST SI-2: Flaw Remediation","NIST CM-6: Configuration Settings","NIST RA-5: Vulnerability Monitoring and Scanning","GDPR Article 32: Security of Processing (technical measures to ensure system integrity)","ITIL Change Management: Emergency Change Procedures",{},"published","2026-10-14T08:20:17.600506+00:00","2026-10-14T08:20:17.574+00:00",{"id":7,"url":25,"slug":26,"title":27},"https:\u002F\u002Fwww.securityweek.com\u002Fchrome-firefox-updates-patch-114-flaws-as-mozilla-unveils-firefox-enterprise\u002F","chrome-firefox-updates-patch-114-flaws-as-mozilla-unveils-firefox-enterprise-d13029","Chrome, Firefox Updates Patch 114 Flaws as Mozilla Unveils Firefox Enterprise",[29,35],{"id":30,"name":31,"slug":32,"description":33,"color":34},"05757c8d-6b93-4194-b35d-7359e7d33b0e","Vulnerability Management","vulnerability-management","Missing scans, no risk prioritization","#fb923c",{"id":36,"name":37,"slug":38,"description":39,"color":40},"af7fce9e-1ce8-4156-93bc-09dcfbfdf29d","Patch Management","patch-management","Unpatched vulnerabilities, delayed updates","#ef4444",[],[43,46,49],{"slug":32,"name":44,"problem":45},"Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",{"slug":38,"name":47,"problem":48},"Automated patch management","Known holes get closed in days, not months.",{"slug":50,"name":51,"problem":52},"endpoint-management","Device management (MDM and UEM)","Every company laptop and phone is known, encrypted, locked down and up to date."]