Google and Mozilla Patch 114 Flaws, Debut Firefox Enterprise for K-12

Key points

• Google and Mozilla released patches for 114 security flaws.
• Mozilla launched Firefox Enterprise with compliance features.
• Updates impact Chrome and Firefox used in K-12 environments.
• No CVEs listed, but medium severity calls for prompt action.

Google and Mozilla have each pushed out new software versions that together address 114 security weaknesses. Mozilla also unveiled Firefox Enterprise, a browser variant built with compliance and management capabilities for organizations. The updates cover Chrome and the standard Firefox browser, while the new enterprise edition targets IT departments needing tighter control.

K-12 schools and government agencies relying on these browsers are directly affected. IT administrators must ensure that managed devices receive the patches, especially in districts where Chrome or Firefox is the default. The enterprise compliance features in Firefox Enterprise could simplify policy enforcement and data handling for student information.

Although no specific CVE identifiers were provided, the sheer number of fixes—114—suggests a significant maintenance release. Even without known exploits, unpatched browsers remain a common entry point for attacks. In education, where sensitive student records and regulatory obligations like FERPA apply, staying current is essential.

The launch of Firefox Enterprise signals Mozilla's push into the managed browser space, competing with Chrome's enterprise offerings. For schools, this means more options for balancing usability with security controls. However, adopting a new browser requires testing and configuration to avoid disrupting existing workflows.

What to watch: monitor vendor advisories for any exploitation attempts, evaluate Firefox Enterprise's compliance tools against district needs, and verify that automatic updates are functioning. Prioritize patching any internet-facing systems first.

What to do now

1. Immediately apply the latest Chrome and Firefox updates on all district-managed devices.
2. Test Firefox Enterprise in a pilot group to assess compliance features and compatibility.
3. Review browser update policies to ensure automatic patching is enabled and enforced.
4. Audit any systems that may have missed the 114 fixes, prioritizing student data servers.
5. Configure Firefox Enterprise policies for data loss prevention and extension control.
6. Educate staff on recognizing phishing attempts that exploit unpatched browsers.
7. Schedule regular vulnerability scans to catch future browser flaws early.

Original source

SecurityWeek