Critical Security Updates Released for Firefox, Chrome, Adobe, and VMware

Posted on

In a concerted effort to bolster cybersecurity, major software vendors have released critical updates addressing multiple vulnerabilities across popular platforms.

Mozilla’s Firefox Update

Mozilla has rolled out Firefox version 152.0.6, rectifying two critical vulnerabilities:

  • CVE-2026-15718: An invalid pointer issue within the JavaScript: WebAssembly component.
  • CVE-2026-15719: A site isolation flaw in the DOM: Navigation component.

While exploit code for these vulnerabilities is publicly available, there have been no reports of active exploitation. Users are strongly advised to update to the latest version promptly.

Google’s Chrome Security Patch

Google has addressed 15 security flaws in its latest Chrome update, including two critical use-after-free vulnerabilities in the Ozone component, identified as CVE-2026-15764 and CVE-2026-15765. These vulnerabilities could potentially allow remote attackers to exploit heap corruption via crafted HTML pages. The update is available as versions 150.0.7871.124/.125 for Windows and macOS, and 150.0.7871.124 for Linux.

Adobe’s Comprehensive Security Fixes

Adobe has released patches for 88 vulnerabilities across several products, notably:

  • ColdFusion: Eight critical vulnerabilities, including CVE-2026-48318 (path traversal leading to arbitrary code execution) and CVE-2026-48322 (code injection vulnerability). These have been addressed in ColdFusion 2025 Update 11 and ColdFusion 2023 Update 22.
  • Adobe Commerce and Magento Open Source: Two critical flaws, such as CVE-2026-48356 (file upload vulnerability leading to privilege escalation).
  • Adobe Experience Manager: Two critical vulnerabilities, including CVE-2026-48259 (server-side request forgery leading to arbitrary code execution).

Users of these products should apply the updates immediately to mitigate potential risks.

These updates underscore the ongoing challenges in maintaining software security. Regularly updating software is crucial to protect against emerging threats. Users and administrators should prioritize these patches to safeguard their systems against potential exploits.

Related Posts