Chrome, Firefox Updates Patch 114 Flaws as Mozilla Unveils Firefox Enterprise

On October 14, 2026, Google and Mozilla simultaneously released security updates for their Chrome and Firefox browsers, collectively patching 114 vulnerabilities. Chrome's update fixed 37 defects, including seven critical memory safety issues such as a buffer overflow in ANGLE and six use-after-free bugs across various components. Most high-severity bugs in Chrome were use-after-free vulnerabilities. Mozilla's Firefox 158 update addressed 77 security defects, including 30 high-severity issues like use-after-free, sandbox escape, privilege escalation, information disclosure, race conditions, and integer overflows. These fixes also extended to Thunderbird 158 and 153.5, and Firefox ESR 153.5 and 115.43. Additionally, Mozilla launched Firefox Enterprise, designed for organizational deployment with enhanced governance, compliance, and security controls, including a management console for policy and data management. No exploits in the wild have been reported for these vulnerabilities.

The vulnerabilities patched include critical memory corruption issues such as buffer overflows and use-after-free bugs, which could potentially allow attackers to execute arbitrary code, escalate privileges, escape sandboxes, or disclose sensitive information if exploited. However, there are no reports of active exploitation in the wild at this time. The introduction of Firefox Enterprise provides organizations with improved control over browser security and data management, potentially reducing risk in enterprise environments.

Users and organizations should apply the latest updates to Chrome (versions 155.0.8059.79/.80) and Firefox (version 158), as well as the corresponding Thunderbird and Firefox ESR releases, to remediate the addressed vulnerabilities. Deploying Firefox Enterprise can provide additional security and governance controls for organizational use. No further immediate action is required beyond applying these official patches.