Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Google’s Chrome 154 and Mozilla’s Firefox 157 updates, announced September 29, 2026, address more than 100 security issues combined, according to SecurityWeek’s September 30 report. Update the browser you use promptly and confirm the installation has finished. The counts combine two vendors’ releases; they are not a measure of which browser is safer overall.

Which browser updates address the flaws?

Browser and channel Fixed release reported What the release addresses
Google Chrome 154.0.8037.92/.93 for Windows and macOS; 154.0.8037.92 for Linux, as reported by SecurityWeek 32 security defects, including a critical ANGLE buffer overflow, CVE-2026-102331, and 25 high-severity weaknesses. Five of those high-severity issues were type-confusion flaws in V8.
Mozilla Firefox, standard release 157, identified by Mozilla in MFSA 2026-97 Mozilla rates the advisory’s overall impact high and lists individual bugs affecting areas including memory safety, sandboxing, WebGPU, WebAssembly, networking, and browser components.
Mozilla Firefox ESR 153.4, 140.17, and 115.42, listed by SecurityWeek as also receiving many of the fixes Check Mozilla’s advisory index and your installed ESR channel for the applicable update.

The Chrome versions and defect totals in the table are SecurityWeek’s reporting; Google’s release page was not available in the cited coverage for independent confirmation. Chrome updates can roll out at different times by platform, so the listed release does not mean every device has already received it.

How many vulnerabilities were reported?

SecurityWeek counted 32 Chrome defects and approximately 76 Firefox vulnerabilities—more than 100 combined. It summarized 25 Chrome issues as high severity and counted 38 high-severity Firefox defects. The Firefox totals are SecurityWeek’s count, not a total stated in Mozilla’s advisory; Mozilla confirms Firefox 157 and enumerates bugs, while assigning impact labels to individual entries.

Counts across browser releases are not directly comparable measures of security. The updates cover different products and advisories, and Mozilla says its memory-safety reporting approach has changed: “We no longer roll all internally identified memory safety vulnerabilities into a single CVE and are now issuing an advisory for every individual bug.” That affects comparisons with older Mozilla disclosures.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
#1 Best Overall
Yubico - Security Key C NFC - Basic Compatibility - Multi-Factor authentication (MFA) Security Key and passkey, Connect via USB-C or NFC, FIDO Certified
  • POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
  • WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
  • FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
  • TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
  • BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.

What kinds of security issues were fixed?

Chrome: ANGLE and V8

SecurityWeek singled out a critical-severity buffer overflow in ANGLE, tracked as CVE-2026-102331. It also reported five high-severity type-confusion flaws in V8, Chrome’s JavaScript and WebAssembly engine. The reported 25 high-severity weaknesses include those V8 issues.

Firefox: memory safety and browser protections

Mozilla’s Firefox 157 advisory includes bugs involving use-after-free, sandbox escapes, privilege escalation, uninitialized memory, and incorrect boundary conditions, among other issues. The advisory’s overall impact rating is high, but not every listed bug has a high individual impact rating; some entries are marked moderate or low.

Rank #2
Yubico - YubiKey 5 NFC - Multi-Factor authentication (MFA) Security Key and passkey, Connect via USB-A or NFC, FIDO Certified - Protect Your Online Accounts
  • POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
  • WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
  • FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
  • MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
  • PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts

Were the vulnerabilities exploited in the wild?

SecurityWeek reported that Google and Mozilla did not mention exploitation of the listed flaws in the reports it covered. That means exploitation was not disclosed in those reports; it does not establish that exploitation was impossible or rule out undisclosed activity.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

How to update Chrome or Firefox

Use the browser’s built-in updater, then restart if prompted. Menu wording can differ slightly by operating system or release.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #3
Yubico - YubiKey 5C NFC - Multi-Factor authentication (MFA) Security Key and passkey, Connect via USB-C or NFC, FIDO Certified - Protect Your Online Accounts
  • POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
  • WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
  • FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
  • MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
  • PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts

Update Chrome

  1. Open Chrome and select the three-dot menu.
  2. Choose Help > About Google Chrome. Chrome checks for updates on this page.
  3. If an update is available, let it download and select Relaunch when offered. Save work in open tabs first; restarting closes and reopens the browser.
  4. Return to About Google Chrome and verify that Chrome reports it is up to date. If your device has not received the release yet, check again later.

Update Firefox

  1. Open Firefox and select the menu button.
  2. Choose Help > About Firefox. Firefox checks for and downloads available updates.
  3. Select Restart to update Firefox when it appears, then confirm the browser has reopened on the updated release.

If you use Firefox ESR, follow the update offered for that installation channel rather than switching to the standard Firefox release based only on its version number. Mozilla’s advisory index lists current notices, while availability can depend on platform and channel.

Rank #4
Yubico - Security Key NFC - Basic Compatibility - Multi-Factor Authentication (MFA) Key, Connect via USB-A or NFC, FIDO Certified
  • POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
  • WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
  • FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
  • TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
  • BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.