{"id":2263,"date":"2026-10-15T15:35:42","date_gmt":"2026-10-15T10:05:42","guid":{"rendered":"https:\/\/www.hexnode.com\/threat-watch\/?p=2263"},"modified":"2026-10-21T13:25:00","modified_gmt":"2026-10-21T07:55:00","slug":"enterprise-browser-security-updates-chrome-155-and-firefox-158","status":"publish","type":"post","link":"https:\/\/www.hexnode.com\/threat-watch\/enterprise-browser-security-updates-chrome-155-and-firefox-158\/","title":{"rendered":"Enterprise Browser Security Updates: Chrome 155 and Firefox 158"},"content":{"rendered":"

Google and Mozilla released browser updates on October 13, 2026, that fix 114 vulnerabilities combined. Google patched 37 flaws in Chrome 155, and Mozilla patched 77 in Firefox 158. These enterprise browser security updates give IT teams a clear reason to audit installed versions across managed desktops.<\/p>\n

Chrome\u2019s release carries four critical memory-safety flaws. Neither Google\u2019s release notes nor Mozilla\u2019s advisory mentions active exploitation.<\/p>\n

The operational question is whether every desktop has installed these fixes and relaunched its browser. Google says Chrome\u2019s build will roll out over the coming days and weeks, so timing will vary.<\/p>\n

Chrome’s Four Critical Flaws Hit Four Different Components<\/h2>\n

Google’s post says it may restrict bug details until most users update. The reviewed sources do not describe an exploitation chain<\/a>.<\/p>\n\n\n\n\n\n\n\n\n
CVE<\/strong><\/th>\nComponent<\/strong><\/th>\nFlaw Type<\/strong><\/th>\n<\/tr>\n<\/thead>\n
CVE-2026-106382<\/td>\nChromecast<\/td>\nUse-after-free<\/td>\n<\/tr>\n
CVE-2026-106197<\/td>\nBrowser<\/td>\nUse-after-free<\/td>\n<\/tr>\n
CVE-2026-106358<\/td>\nNavigation<\/td>\nUse-after-free<\/td>\n<\/tr>\n
CVE-2026-106240<\/td>\nV8<\/td>\nType confusion<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

Chrome\u2019s High-Rated Flaws Reach Credentials, Updaters, and V8<\/h2>\n

The 29 high-rated flaws span several classes:<\/p>\n