Chrome 147, Firefox 150 Patch Critical Code Execution Flaws

Executive Summary

Google and Mozilla have begun rolling out Chrome 147 and Firefox 150, respectively, to address multiple critical and high-severity vulnerabilities that could allow attackers to execute arbitrary code on affected systems. The updates, reported by SecurityWeek, apply to desktop and mobile platforms. No CVE identifiers or specific vulnerability details have been disclosed at the time of writing. Users and enterprise administrators are advised to apply the updates as soon as they become available.

Technical Analysis

Chrome 147 resolves a set of vulnerabilities internally classified as critical and high severity, though Google has not yet published the full changelog or CVE entries. Historically, critical Chrome patches have addressed memory corruption issues in components such as V8, Blink, and GPU processing. Firefox 150 similarly targets high-severity flaws that could lead to remote code execution, according to Mozilla's advisory. Both browser vendors follow a phased rollout model, meaning the updates may not be immediately available to all users. The lack of public CVE details at this stage is not unusual — both companies often delay disclosure until a majority of users have updated.

Mitigations & Recommendations

For individual users: enable automatic updates in Chrome (Settings > About Chrome) and Firefox (Preferences > Updates) to receive the patches as they propagate. Enterprise administrators should test the updates in a staging environment before broad deployment, particularly if custom extensions or legacy web applications are in use. Monitor browser version numbers — Chrome 147 and Firefox 150 — to confirm installation. No workarounds are available for the underlying vulnerabilities; patching is the only reliable mitigation.