Chrome 156 and Firefox 159 Fix a Combined 219 Security Flaws

Google and Mozilla have released security updates for Chrome and Firefox. Together, they address 219 vulnerabilities, including critical flaws in Chrome.

Google and Mozilla have released security updates for Chrome and Firefox. Together, they address 219 vulnerabilities, including critical flaws in Chrome.

Chrome in Enhanced Protection mode can detect the copying of suspicious commands used in ClickFix attacks and display a warning after analysis through Safe Browsing.

On October 21, 2026, Google expanded warnings about insecure HTTP connections to all users. Chrome first tries HTTPS and displays a warning if it is unavailable.

Google released Chrome 154 for Windows, macOS, and Linux. The update fixes 108 security flaws, 11 of which are rated Critical.

Proofpoint researchers observed the BlueMoon exploit kit in targeted phishing campaigns. The chain exploits Chrome/V8 flaws and Windows privilege escalation; patches are available.

Chrome 153 fixes CVE-2026-87491 in V8, which Google knows is being exploited in the wild. Desktop users should update their browser.

Google released a Chrome update fixing CVE-2026-85046 in V8, for which an in-the-wild exploit already exists. Opera also released a fix.

Google released a Chrome update fixing the high-severity CVE-2026-85046 vulnerability in V8. CISA has added it to its Known Exploited Vulnerabilities catalog.