A corrective release of Firefox 150.0.1 is now available, addressing 28 vulnerabilities (19 vulnerabilities are categorized under CVE-2026-7322, 4 under CVE-2026-7323, and 4 under CVE-2026-7324). All vulnerabilities are related to memory handling issues, such as buffer overflows and accessing freed memory areas. These problems could potentially allow for the execution of malicious code when specially crafted pages are opened. 19 vulnerabilities have been assigned a critical severity level, indicating the possibility of attacker code execution bypassing sandbox isolation when opening specially crafted web pages.
Non-security changes in Firefox 150.0.1:
- Resolved an issue with the incorrect display of dropdown menus (instead of showing a drop-down list, all items were displayed at once).
- Fixed a bug that caused Facebook and other sites to load incorrectly on systems with Bitdefender antivirus installed.
- Resolved an issue that caused repeated prompts for location access after access was denied.
- Fixed a problem that prevented adding tabs to some previously saved tab groups.
- Fixed an error that caused the disappearance of frames and outlines of certain page elements after using pinch zoom or smart zoom on macOS and Windows.
Google has released Chrome 147.0.7727.137 with fixes for 30 vulnerabilities, 4 of which are labeled as critical. Critical issues allow bypassing all levels of browser protection and executing code on the system outside the sandbox environment. Details are not yet disclosed, only that the vulnerabilities are caused by use-after-free issues in Canvas (CVE-2026-7363), accessibility features (CVE-2026-7344), the Views UI component (CVE-2026-7343), and platform-specific code for iOS (CVE-2026-7361).
Source: opennet.ru
