mozillaZine
LightNews LightNews
banner
mozillazine.bsky.social
mozillaZine
@mozillazine.bsky.social
34 followers 54 following 150 posts
L'actu en français du projet Mozilla : Firefox, Firefox mobile, Focus, Thunderbird, leurs extensions, etc. l'éducation, les politiques Internet… #indépendant
Posts Replies Media Videos
mozillazine.bsky.social
Mozilla écrit à Macron

Lettre ouverte : Exploiter l’IA open source pour faire progresser la souveraineté numérique wikimedia.brussels/open-letter-...
Mozilla Open letter: Harnessing open source AI to advance digital sovereignty November 13, 2025 Dear President Macron, Dear Chancellor Merz, Dear President von der Leyen, Europe is at a crossroads. The Summit on European Digital Sovereignty marks an important milestone for the EU and its member states in aligning on a shared
November 16, 2025 at 10:43 AM
mozillazine.bsky.social
Dans le JT de 13h de France 2, il y a eu un petit sujet intitulé : PANDA ROUX Le renard de feu des cimes

« celui qu'on surnomme le renard de feu est devenu une star sur les réseaux sociaux … qui demain pourrait doucement renaître. »
à partir de 14 min 56 www.france.tv/france-2/jou...
Panda roux assis dans un arbre, regard caméra, fond flou de végétation, capture d'écran d'une vidéo de france•tv.
November 15, 2025 at 1:41 PM
mozillazine.bsky.social
Firefox 144.0.2, mise à jour de sécurité et de stabilité, corrige des problèmes avec les « locales » dans les paramètres et avec la navigation au clavier dans le bouton de recherche unifié www.firefox.com/en-US/firefo... et bulletin de sécurité (impact élevé) www.mozilla.org/en-US/securi...
144.0.2 Firefox Release October 28, 2025 Version 144.0.2, first offered to Release channel users on October 28, 2025 Fixed — Fixed an issue where the list of available locales in about:settings contained more locales than were downloaded or currently supported. (Bug 1994642) — Fixed an issue where using the keyboard to open the Unified Search dropdown was inconsistent. The dropdown now expands properly, allowing users to select a search engine using the keyboard. (Bug 1979826) — Fixed an issue where curated photo collections on Microsoft OneDrive's Photos “For You” page failed to load, showing a gray screen instead of content. Collections now display as expected. (Bug 1986533) — Fixed a startup crash affecting Windows users with Avast or other security software installed. (Bug 1992678) — Fixed an issue on macOS where the emoji picker shortcut and menu entry stopped working after switching between apps. (Bug 1980815) — Fixed an issue on macOS where dragging images from Firefox into third-party apps like Preview could fail or behave unexpectedly. (Bug 1995345) — Fixed performance and video playback issues on macOS 26 (Tahoe) that occurred when the system was under heavy load. (Bug 1995638) — Fixed a browser hang on macOS 26 (Tahoe) that could occur when bookmark folders contained loops or repeated references to themselves. (Bug 1995621) — Security fix. Mozilla Foundation Security Advisory 2025-86 Security Vulnerabilities fixed in Firefox 144.0.2 Announced: October 28, 2025 Impact: high Products: Firefox Fixed: in Firefox 144.0.2 #CVE-2025-12380: Use-after-free in WebGPU internals triggered from a compromised child process Reporter: Oskar L Impact: high Description Starting with Firefox 142, it was possible for a compromised child process to trigger a use-after-free in the GPU or browser process using WebGPU-related IPC calls. This may have been usable to escape the child process sandbox. References Bug 1993113
October 28, 2025 at 4:01 PM
mozillazine.bsky.social
Mozilla Firefox 143.0.4 vient atténuer des ralentissements ou des échecs sporadiques lors du chargement de certains sites de Google sur les systèmes équipés de certains logiciels tiers ; notes de version www.firefox.com/en-US/firefo...
143.0.4 Firefox Release October 3, 2025 Version 143.0.4, first offered to Release channel users on October 3, 2025 Fixed Improved Firefox' connection fallback behavior to mitigate sporadic slow/failed loads on some Google sites on systems with certain third-party software installed. (Bug 1990699)
October 4, 2025 at 11:08 AM
mozillazine.bsky.social
Firefox 143.0.3, mise à jour de sécurité et de stabilité, corrige des problèmes avec la fonctionnalité de glisser pour épingler et avec les WebExtensions www.firefox.com/en-US/firefo... bulletin de sécurité (impact élevé) www.mozilla.org/en-US/securi...
143.0.3 Firefox Release September 30, 2025 Version 143.0.3, first offered to Release channel users on September 30, 2025 Fixed — Adjusted the timing of the new drag-to-pin interaction cue for better reliability. (Bug 1989344) — Fixed an issue that prevented some extensions from updating via the Add-ons Manager. (Bug 1984724) — Fixed a regression that prevented Firefox View sections from collapsing/expanding as expected. (Bug 1989200) — Addressed a WebExtensions storage issue that could cause Firefox to crash on startup with certain extensions installed. (Bug 1989840) — Fixed an issue where opening an add-on's "Extension settings" from the post-install prompt could break the Customize tab and some keyboard shortcuts until restart. (Bug 1983869) — Reduced long delays when loading certain websites while connected to networks that block UDP connections. (Bug 1980812) — Various stability and security fixes. Mozilla Foundation Security Advisory 2025-80 Security Vulnerabilities fixed in Firefox 143.0.3 Announced: September 30, 2025 Impact: high Products: Firefox Fixed in Firefox 143.0.3 #CVE-2025-11152: Sandbox escape due to integer overflow in the Graphics: Canvas2D component Reporter: Oskar L Impact: high References: Bug 1987246 #CVE-2025-11153: JIT miscompilation in the JavaScript Engine: JIT component Reporter: Nan Wang Impact: high References: Bug 1987481
September 30, 2025 at 6:16 PM
mozillazine.bsky.social
Mozilla Firefox 143 prend désormais en charge les applications web sous Windows ; notes de version www.mozilla.org/en-US/firefo... bulletin de sécurité (impact élevé) www.mozilla.org/en-US/securi... page des nouveautés #DéchargerLesOnglets www.mozilla.org/fr/firefox/1...
143.0 Firefox Release September 16, 2025 Version 143.0, first offered to Release channel users on September 16, 2025 New — On Windows, Firefox now supports running websites as web apps pinned directly to the taskbar. These are sites that you can pin and run as simplified windows directly from the taskbar without losing access to your installed add-ons. This feature is not currently available for Firefox installs from the Microsoft Store. — Tabs can now be pinned by dragging them to the start of the tab strip, making it easier to keep important sites within reach. Screenshot showing the drag and drop area for pinning tabs — Copilot from Microsoft can now be chosen as a chatbot to use in the sidebar for quick access without leaving your main view. — When a site asks for camera access, it can now be previewed inside the permission dialog. This is especially helpful when switching between multiple cameras. Screenshot showing camera preview inside permission dialog — The Firefox address bar can now show you important dates and events. This feature supports displaying events (e.g. “Mother’s Day”) in the United States, United Kingdom, Germany, France, and Italy regions. — Firefox has expanded its Fingerprinting Protection by reporting constant values for several more attributes of user's computers. — When downloading a file in Private Browsing mode, Firefox now asks whether to keep or delete it after that session ends. You can adjust this behavior in Settings. Screenshot showing file deletion prompt Screenshot showing setting for always deleting files — Firefox now supports Windows UI Automation, which improves support for accessibility tools such as Windows Voice Access, Text Cursor Indicator and Narrator. This feature is part of a progressive roll out. What is a progressive roll out? Certain new Firefox features are released gradually. This means some users will see the feature before everyone does. This approach helps to get early feedback to catch bugs and improve behavior quickly, meaning more Firefox users overall have a better experience. Firefox Votre version de Firefox a été mise à jour. Conservez vos onglets et votre rapidité Libérez de la mémoire sans abandonner vos onglets utiles. Décharger l’onglet Conservez vos onglets. Libérez de la mémoire. Décharger un onglet le garde visible tout en libérant de la mémoire et le CPU. Faites un clic droit sur un ou plusieurs onglets et choisissez Décharger l’onglet pour aider Firefox à rester rapide. Revenez et retrouvez votre onglet, où vous l’avez laissé. En savoir plus → Voir la totalité des notes de version
September 17, 2025 at 4:33 PM
mozillazine.bsky.social
Sur iOS 26, Firefox résume les pages web grâce à Apple Intelligence #secoué – iGeneration @macg.co www.igen.fr/app-store/20...
Capture d’écran en trois étapes montrant l’utilisation d’une fonctionnalité de résumé de page web dans une application de navigation sur mobile : à gauche, une page web avec un bouton invitant à appuyer pour résumer la page ; au centre, l’écran de chargement du résumé ; à droite, le résultat du résumé généré par une intelligence artificielle, illustrant les améliorations de Firefox pour les utilisateurs parlant chinois, japonais et coréen sur Android.
September 9, 2025 at 5:05 PM
mozillazine.bsky.social
Microsoft Copilot s’invitera bientôt dans la barre latérale de Firefox – @clubic-off.bsky.social www.clubic.com/actualite-57...
Capture d’écran de l’interface d’un logiciel de chatbot IA montrant une liste de modèles disponibles (Anthropic Claude, ChatGPT, Copilot, Google Gemini, Le Chat Mistral) et les options de paramétrage : rapidité de réponse, profondeur de réflexion, mode d’apprentissage et style de réponse, avec une étiquette « Nouveau » en surbrillance au-dessus du bouton « Résumer la page ».
September 9, 2025 at 4:38 PM
mozillazine.bsky.social
Vous venez de passer à Firefox Nightly 144 ! #JourDeSorties @firefoxnightly.bsky.social nightly.mozfr.org
Votre version de Firefox Nightly a été mise à jour. Vous venez de passer à Firefox Nightly 144 ! Toutes les 4 à 5 semaines, une version majeure de Firefox est publiée et par conséquent, le numéro de version de Nightly augmente lui aussi. Le moment est donc bien choisi pour vous remercier de nous aider à améliorer Firefox et pour vous fournir quelques informations comme de la documentation, les canaux de communication et les sites proposant des actualités sur Nightly qui pourraient vous intéresser. Si vous voulez vous tenir au courant de tout ce qui concerne Nightly et sa communauté, commencez par lire notre blog et suivre nos comptes Mastodon ou Bluesky ! Vous souhaitez savoir quelles fonctionnalités de la plateforme vous pouvez tester sur Nightly, que vous ne pouvez pas encore essayer sur les autres versions de Firefox ? Consultez la page des préférences de Firefox Labs. Vous constatez des plantages ? Des comportements inhabituels ? Des régressions concernant la compatibilité Web ? Ce serait super de le signaler sur Bugzilla afin de s’assurer que rien de tout cela ne se produise dans la version finale (points bonus si vous ajoutez Nightly-community dans le champ keyword lorsque vous remplissez le rapport de bug). C’est parti !
August 19, 2025 at 12:27 PM
mozillazine.bsky.social
Mozilla avertit d'une campagne de phishing visant les développeurs et développeuses d’extension sur AMO et donne des conseils : blog.mozilla.org/addons/2025/...
Warning: Phishing campaign detected Scott DeVaney August 1, 2025 The developer community should be aware we’ve detected a phishing campaign targeting AMO (addons.mozilla.org) accounts. Add-on developers should exercise extreme caution and scrutiny when receiving emails claiming to be from Mozilla/AMO. Phishing emails typically state some variation of the message “Your Mozilla Add-ons account requires an update to continue accessing developer features.” In order to protect yourself and keep your AMO account secure, we strongly recommend that you: 1. Do not click any links in the email. 2. Verify the email was sent by a Mozilla-owned domain: firefox.com, mozilla.org, mozilla.com, or their subdomains. 3. Ensure that the email passes SPF, DKIM, and DMARC checks (consult your email provider and/or email client’s support documentation for details). 4. Validate that links in the email point to mozilla.org or firefox.com before opening them; or even better, navigate directly to these domains rather than visiting via a link in an email. 5. Only enter your Mozilla username and password on mozilla.org or firefox.com. For more information on how to detect and report phishing scams, please see these helpful guides from the U.S. Federal Trade Commission and the U.K. National Cyber Security Centre, or consult your local government. If we uncover more details to share we’ll update this post accordingly.
August 2, 2025 at 1:10 PM
mozillazine.bsky.social
« Firefox peut désormais vous aider à organiser automatiquement vos onglets. Un modèle d'IA local identifie les onglets similaires, les organise automatiquement en groupes et suggère même des noms de groupe. Tout se passe sur votre appareil afin de respecter votre vie privée. »
New Now Firefox can help you keep your tabs organized, automatically. A local AI model identifies similar tabs, automatically organizes them into groups, and even suggests group names. Everything happens on your device to respect your privacy. Learn more here. Animation showing the Firefox browser with the Smart Tabs feature being used This feature is part of a progressive roll out. What is a progressive roll out? Vertical tabs users can now adjust the size of the tools areas at the bottom of the sidebar. To see fewer tools and more tabs, drag down the divider line which pushes extra tools into an overflow menu. Screenshot Firefox browser with the sidebar enabled, demonstrating the divider for extra icons
July 22, 2025 at 2:11 PM
mozillazine.bsky.social
Vous venez de passer à Firefox Nightly 143 ! #JourDeSorties @firefoxnightly.bsky.social nightly.mozfr.org
Votre version de Firefox Nightly a été mise à jour. Vous venez de passer à Firefox Nightly 143 ! Toutes les 4 à 5 semaines, une version majeure de Firefox est publiée et par conséquent, le numéro de version de Nightly augmente lui aussi. Le moment est donc bien choisi pour vous remercier de nous aider à améliorer Firefox et pour vous fournir quelques informations comme de la documentation, les canaux de communication et les sites proposant des actualités sur Nightly qui pourraient vous intéresser. Si vous voulez vous tenir au courant de tout ce qui concerne Nightly et sa communauté, commencez par lire notre blog et suivre nos comptes Mastodon ou Bluesky ! Vous souhaitez savoir quelles fonctionnalités de la plateforme vous pouvez tester sur Nightly, que vous ne pouvez pas encore essayer sur les autres versions de Firefox ? Consultez la page des préférences de Firefox Labs. Vous constatez des plantages ? Des comportements inhabituels ? Des régressions concernant la compatibilité Web ? Ce serait super de le signaler sur Bugzilla afin de s’assurer que rien de tout cela ne se produise dans la version finale (points bonus si vous ajoutez Nightly-community dans le champ keyword lorsque vous remplissez le rapport de bug). C’est parti !
July 22, 2025 at 11:29 AM
mozillazine.bsky.social
Firefox 139.0.4 corrige un problème de blocage lors du passage d’une application à une autre ou à l’ouverture de certains panneaux, des problèmes de sélection, un problème spécifique à Windows et des failles de sécurité www.mozilla.org/en-US/securi... avis de sécurité www.mozilla.org/fr/security/...
139.0.4 Firefox Release June 10, 2025 Version 139.0.4, first offered to Release channel users on June 10, 2025 ✓ Fixed — Fixed Firefox freezing when switching between apps or opening certain panels within the browser. (Bug 1969253 & Bug 1969346) — Fixed difficult selection of drop-down menu options in the Firefox preferences page when selected via the in-page search. (Bug 1968949) — Fixed various selection issues when triple-clicking text in some situations. (Bug 1969100 & Bug 1969432) — Fixed an incorrect filename being used when setting an image as the desktop wallpaper on Windows. (Bug 1969793) — Various security fixes. Mozilla Foundation Security Advisory 2025-47 Security Vulnerabilities fixed in Firefox 139.0.4 Announced: June 10, 2025 Impact: high Products: Firefox Fixed in: Firefox 139.0.4 #CVE-2025-49709: Memory corruption in canvas surfaces Reporter: Yannis Juglaret Impact: high Description Certain canvas operations could have lead to memory corruption. References Bug 1966083 #CVE-2025-49710: Integer overflow in OrderedHashTable Reporter: Shaheen Fazim Impact: high Description An integer overflow was present in OrderedHashTable used by the JavaScript engine References Bug 1970095
June 10, 2025 at 4:29 PM
mozillazine.bsky.social
Mozilla Firefox 139.0.1 corrige un problème spécifique à des cartes graphiques NVIDIA www.mozilla.org/en-US/firefo...
139.0.1 Firefox Release May 29, 2025 Version 139.0.1, first offered to Release channel users on May 29, 2025 Fixed Fixed graphics corruption with certain NVIDIA graphics adapters and multiple monitors running at mixed refresh rates after updating to Firefox 139. (Bug 1968876)
May 30, 2025 at 2:11 PM
mozillazine.bsky.social
Découvrez la nouvelle barre d’adresse de Firefox blog.mozilla.org/fr/firefox-f...
« Plus rapide et plus intuitive que jamais, elle s’adapte à vos habitudes de recherche et de navigation tout en restant fidèle aux valeurs qui font la force de Firefox : confidentialité, choix et transparence. »
bouton de recherche unifié
May 28, 2025 at 11:46 AM
mozillazine.bsky.social
Mozilla Firefox 139 est sorti ; notes de version www.mozilla.org/en-US/firefo... bulletin de sécurité (impact critique) www.mozilla.org/en-US/securi... et page des nouveautés www.mozilla.org/fr/firefox/1...
139.0 Firefox Release May 27, 2025 Version 139.0, first offered to Release channel users on May 27, 2025 New By popular request, Full-Page Translations are now available within Firefox extension pages that start with the moz-extension:// URL scheme. Screenshot of Firefox Relay extension page translated from English to German The New Tab custom wallpaper (and colors) option is now available! Your own image can be uploaded as your New Tab wallpaper or any custom color can be selected - from the brightest pink to dark gray. This feature will be rolling out gradually to new users and can also be enabled immediately via Firefox Labs. Additionally, new Wallpaper images and a new Celestial category have also been added. Screenshot showing the new custom wallpaper upload option Screenshot showing the color chooser Link Previews is currently available as an experimental feature which can be enabled via Firefox Labs in the Firefox settings. After enabling, use the Alt+Shift keyboard shortcut when hovering over a link to see the previews in action! Screenshot showing a preview pane for a hovered link Fixed PNG images with transparency now keep their transparency when pasted into Firefox. The upload performance of HTTP/3 has been significantly improved, particularly on resumed connections (QUIC 0-RTT) and high-bandwidth and high-delay connections. Various security fixes. Changed Due to recent changes in how Chrome encrypts user data on Windows, the Firefox migration wizard can no longer directly import payment methods or passwords from Chrome. However, users can still export passwords from Chrome to a CSV file and then import them into Firefox using the migration wizard or the password manager. The Review Checker feature is shutting down and will no longer be available after June 10, 2025.
May 27, 2025 at 4:40 PM
mozillazine.bsky.social
Vous venez de passer à Firefox Nightly 141 ! #jourDeSorties @firefoxnightly.bsky.social
Votre version de Firefox Nightly a été mise à jour. Vous venez de passer à Firefox Nightly 141 ! Toutes les 4 à 5 semaines, une version majeure de Firefox est publiée et par conséquent, le numéro de version de Nightly augmente lui aussi. Le moment est donc bien choisi pour vous remercier de nous aider à améliorer Firefox et pour vous fournir quelques informations comme de la documentation, les canaux de communication et les sites proposant des actualités sur Nightly qui pourraient vous intéresser. Si vous voulez vous tenir au courant de tout ce qui concerne Nightly et sa communauté, commencez par lire notre blog et suivre nos comptes Mastodon ou Bluesky ! Vous souhaitez savoir quelles fonctionnalités de la plateforme vous pouvez tester sur Nightly, que vous ne pouvez pas encore essayer sur les autres versions de Firefox ? Consultez la page des préférences de Firefox Labs. Vous constatez des plantages ? Des comportements inhabituels ? Des régressions concernant la compatibilité Web ? Ce serait super de le signaler sur Bugzilla afin de s’assurer que rien de tout cela ne se produise dans la version finale (points bonus si vous ajoutez Nightly-community dans le champ keyword lorsque vous remplissez le rapport de bug). C’est parti !
May 27, 2025 at 11:54 AM
mozillazine.bsky.social
Dehors, on ferme !

Mozilla ferme Pocket et Fakespot @fakespot.com pour « investir dans ce qui fait progresser l’internet », sur le blog de Mozilla (Pocket sera tué le 8 octobre 2025) blog.mozilla.org/en/mozilla/b...
Pocket shuts down July 8, 2025 You will no longer be able to download Pocket or purchase a new Pocket Premium subscription from May 22, 2025. Premium monthly and annual subscriptions will be cancelled automatically. Annual subscribers will receive automatic refunds from July 8, 2025. Users can export saves anytime until October 8, 2025, after which their data will be permanently deleted. API users will no longer be able to transact data (read or write) over Pocket’s API from October 8, 2025 and will need to export their data before this date. For more information, including refund details for Premium annual subscribers and how to export saves, go to our Pocket support article. Fakespot will begin shutting down on July 1, 2025 You will no longer be able to use the Fakespot extensions, mobile apps, or website from July 1, 2025. The Fakespot feature within Firefox known as Review Checker will shut down on June 10, 2025.
May 22, 2025 at 4:58 PM
mozillazine.bsky.social
En date du 13 mai, Firefox 138.0.3, mise à jour de stabilité, corrigeait un plantage lié à WebGL, des plantages pour des effets SVG appliqués à de très petite zone, des problèmes de vidéo pour Linux Wayland et un problème avec la barre de recherche dans la page www.mozilla.org/en-US/firefo...
138.0.3 Firefox Release May 13, 2025 Version 138.0.3, first offered to Release channel users on May 13, 2025 Fixed Fixed a crash that could occur when viewing websites that use WebGL. (Bug 1961191) Fixed an issue where the browser could repeatedly crash when certain SVG effects (like blur or drop shadow) were applied to very small areas. (Bug 1924241) On Linux, fixed an issue where video playback would appear washed-out on Wayland when HDR support was unavailable. (Bug 1961610) Fixed an issue where the “Match Case” shortcut Alt+C in the find-in-page toolbar did not toggle the checkbox as expected. (Bug 1952611)
May 17, 2025 at 10:18 PM
mozillazine.bsky.social
Firefox 138.0.4 corrige en urgence deux failles critiques rapportées par la Trend Micro’s Zero Day Initiative dans le cadre d’un concours de hacking www.mozilla.org/en-US/securi...
Mozilla Foundation Security Advisory 2025-36 Security Vulnerabilities fixed in Firefox 138.0.4 Announced: May 17, 2025 Impact: critical Products: Firefox Fixed in: Firefox 138.0.4 #CVE-2025-4920: Out-of-bounds access when resolving Promise objects Reporter: Edouard Bochin and Tao Yan from Palo Alto Networks working with Trend Micro's Zero Day Initiative Impact: critical Description An attacker was able to perform an out-of-bounds read or write on a JavaScript Promise object. References Bug 1966612 #CVE-2025-4921: Out-of-bounds access when optimizing linear sums Reporter: Manfred Paul working with Trend Micro's Zero Day Initiative Impact: critical Description An attacker was able to perform an out-of-bounds read or write on a JavaScript object by confusing array index sizes. References Bug 1966614
May 17, 2025 at 10:07 PM
mozillazine.bsky.social
Mozilla Firefox 138.0.1, mise à jour de stabilité, corrige un problème de page vierge en page d’accueil et de nouvel onglet, et apporte une solution de contournement pour un bogue avec outlook⋅office⋅com/outlook⋅live⋅com ; notes de version www.mozilla.org/en-US/firefo...
138.0.1 Firefox Release May 1, 2025 Version 138.0.1, first offered to Release channel users on May 1, 2025 ✓ Fixed — Fixed an issue which caused a blank page to be shown for Home and New Tab pages for some users. (Bug 1963537) — Added a workaround for a bug in outlook.office.com/outlook.live.com where attachment filenames are incorrectly prefixed with UTF-8 when saved. (Bug 1961710)
May 1, 2025 at 3:09 PM
mozillazine.bsky.social
Firefox 138 est aussi une mise à jour de sécurité jugée d’impact élevé www.mozilla.org/en-US/securi...
Mozilla Foundation Security Advisory 2025-28 Security Vulnerabilities fixed in Firefox 138 Announced: April 29, 2025 Impact: high Products: Firefox Fixed in: Firefox 138 #CVE-2025-2817: Privilege escalation in Firefox Updater Reporter: Dong-uk Kim (@justlikebono) Impact: high Description Mozilla Firefox's update mechanism allowed a medium-integrity user process to interfere with the SYSTEM-level updater by manipulating the file-locking behavior. By injecting code into the user-privileged process, an attacker could bypass intended access controls, allowing SYSTEM-level file operations on paths controlled by a non-privileged user and enabling privilege escalation. References Bug 1917536 #CVE-2025-4082: WebGL shader attribute memory corruption in Firefox for macOS Reporter: un3xploitable & GF Impact: high Description Modification of specific WebGL shader attributes could trigger an out-of-bounds read, which, when chained with other vulnerabilities, could be used to escalate privileges. This bug only affects Firefox for macOS. Other versions of Firefox are unaffected. References Bug 1937097 #CVE-2025-4083: Process isolation bypass using "javascript:" URI links in cross-origin frames Reporter: Nika Layzell Impact: high Description A process isolation vulnerability in Firefox stemmed from improper handling of javascript: URIs, which could allow content to execute in the top-level document's process instead of the intended frame, potentially enabling a sandbox escape. References Bug 1958350 #CVE-2025-4085: Potential information leakage and privilege escalation in UITour actor Reporter: Andrew McCreight Impact: moderate Description An attacker with control over a content process could potentially leverage the privileged UITour actor to leak sensitive information or escalate privileges. References Bug 1915280 #CVE-2025-4086: Specially crafted filename could be used to obscure download type Reporter: Hafiizh Impact: moderate Description A specially crafted filename containing a large number of encoded newline characters could obscure the file's extension when displayed in the download dialog. This bug only affects Firefox for Android. Other versions of Firefox are unaffected. References Bug 1945705 #CVE-2025-4087: Unsafe attribute access during XPath parsing Reporter: Ivan Fratric Impact: moderate Description A vulnerability was identified in Firefox where XPath parsing could trigger undefined behavior due to missing null checks during attribute access. This could lead to out-of-bounds read access and potentially, memory corruption. References Bug 1952465 #CVE-2025-4088: Cross-site request forgery via storage access API redirects Reporter: Chris P. Fredrickson Impact: moderate Description A security vulnerability in Firefox allowed malicious sites to use redirects to send credentialed requests to arbitrary endpoints on any site that had invoked the Storage Access API. This enabled potential Cross-Site Request Forgery attacks across origins. References Bug 1953521 #CVE-2025-4089: Potential local code execution in "copy as cURL" command Reporter: Ameen Basha M K Impact: moderate Description Due to insufficient escaping of special characters in the "copy as cURL" feature, an attacker could trick a user into using this command, potentially leading to local code execution on the user's system. References Bug 1949994, 1956698, 1960198 #CVE-2025-4090: Leaked library paths in Firefox for Android Reporter: Seongyun Jeong Impact: low Description A vulnerability existed in Firefox for Android where potentially sensitive library locations were logged via Logcat. References Bug 1929478 #CVE-2025-4091: Memory safety bugs fixed in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.10 Reporter: Maurice Dauer and the Mozilla Fuzzing Team Impact: moderate Description Memory safety bugs present in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.9. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. References Memory safety bugs fixed in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.10 #CVE-2025-4092: Memory safety bugs fixed in Firefox 138 and Thunderbird 138 Reporter: Randell Jesup, Jens Stutte, and the Mozilla Fuzzing Team Impact: high Description Memory safety bugs present in Firefox 137 and Thunderbird 137. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. References Memory safety bugs fixed in Firefox 138 and Thunderbird 138
April 29, 2025 at 7:24 PM
mozillazine.bsky.social
Mozilla Firefox 138 apporte un gestionnaire de profils refondu et améliore le remplissage automatique dynamique des adresses et cartes bancaires ; notes de version www.mozilla.org/en-US/firefo... et bulletin de sécurité (impact élevé) www.mozilla.org/en-US/securi...
138.0 Firefox Release April 29, 2025 Version 138.0, first offered to Release channel users on April 29, 2025 New Profile management helps protect your privacy and stay focused by separating your online life into distinct profiles — for work, school, vacation planning, or whatever you choose. You can now name your profiles and customize them with avatars and color themes for easy recognition, then quickly switch between them — all while keeping bookmarks, tabs, and browsing history completely separate. [A Firefox browser window labelled “Choose a Firefox profile” with options to select a green “work” profile with a briefcase avatar or a lavender “personal” profile with a flower avatar, create a new profile, or set a specific profile when Firefox opens.] This feature is part of a progressive roll out. What is a progressive roll out? Users in the United States can now trigger weather suggestions in the address bar! Simply type a weather-related term or a city name, and view the result directly in the address bar dropdown. Currently available in: United States This feature is part of a progressive roll out. What is a progressive roll out? Firefox on Windows 11 now uses acrylic-style menus for popup windows, which better match the operating system’s aesthetic. You can now copy links from background tabs using the tabstrip context menu on MacOS and Linux. Fixed Various security fixes. Changed Improved the address and credit card autofill experience to better handle forms that update dynamically as users input information. Autofill now correctly fills newly revealed fields—such as those shown after selecting a country. Rededicated previous color settings to Contrast Control settings. (Learn more) Enterprise You can find information about policy updates and enterprise specific bug fixes in the Firefox for Enterprise 138 Release Notes. Developer | Developer Information Added support for the import map integrity field, allowing you to ensure the integrity of dynamically or statically imported modules. Implemented support for Error.isError, enabling brand checks to determine whether an object is an instance of Error. (Learn more) Added support for the error.captureStackTrace extension to improve compatibility with other browsers. (Learn more) A new column has been added to the Network panel to display the full path of the request URL. This enhancement makes helps developers quickly view and analyze complete request paths. Firefox now applies a uniform user agent (UA) style to <h1> elements, regardless of whether they are used inside <article>, <aside>, <nav>, or <section>. (Learn more) This feature is part of a progressive roll out. What is a progressive roll out?
April 29, 2025 at 7:05 PM
mozillazine.bsky.social
Mozilla Firefox 137.0.2 pour Android corrige un bogue de sécurité repéré par l'équipe Fuzzing de Mozilla ; notes de version www.mozilla.org/en-US/firefo... et bulletin de sécurité (impact élevé) www.mozilla.org/en-US/securi...
Mozilla Foundation Security Advisory 2025-25 Security vulnerability fixed in Firefox 137.0.2 Announced: April 15, 2025 Impact: high Products: Firefox Fixed in: Firefox 137.0.2 #CVE-2025-3608: Race condition in nsHttpTransaction could lead to memory corruption Reporter: The Mozilla Fuzzing Team Impact: high Description A race condition existed in nsHttpTransaction that could have been exploited to cause memory corruption, potentially leading to an exploitable condition. References Bug 1951554 CVE-2025-3608
April 15, 2025 at 1:56 PM
mozillazine.bsky.social
Firefox 137.0.2 corrige un bogue de sécurité jugé élevé et des bogues de stabilité comme des problèmes d’accessibilité avec la nouvelle fonctionnalité de signature des PDF ou un problème qui forçait à redémarrer de nombreuses fois pour achever une mise à jour ⤵️ www.mozilla.org/en-US/firefo...
137.0.2 Firefox Release April 15, 2025 Version 137.0.2, first offered to Release channel users on April 15, 2025 Fixed — Fixed file picker not being displayed when exporting passwords on macOS in about:logins for some users. (Bug 1956266) — Fixed accessibility issues with the new PDF signature feature. (Bug 1956110 and Bug 1952571) — Fixed an issue where using the context menu to paste in the Style Editor would insert the code twice. (Bug 1955854) — Fixed functional regressions in our XSLT support introduced in 137. (Bug 1954841) — Fixed a tooltip flickering issue on Windows that affected some users when hovering. (Bug 1958631) — Fixed an issue where Firefox would not respond to clicks in some HTML5 video players. (Bug 1959251) — Fixed an issue where radio inputs behaved incorrectly when preventDefault() was called on the click event. (Bug 1957956) — Fixed an issue that caused some Firefox users to restart their browser multiple times to complete an update. (Bug 1959492) — Security fix. Changed — Fixed an issue with DRM video playback on some sites caused by the general availability rollout of Microsoft's PlayReady hardware decryption DRM support in Firefox 137. PlayReady support is now limited to specific sites while broader compatibility continues to be tested. (Bug 1959827) Mozilla Foundation Security Advisory 2025-25 Security vulnerability fixed in Firefox 137.0.2 Announced: April 15, 2025 Impact: high Products: Firefox Fixed in: Firefox 137.0.2 #CVE-2025-3608: Race condition in nsHttpTransaction could lead to memory corruption Reporter: The Mozilla Fuzzing Team Impact: high Description A race condition existed in nsHttpTransaction that could have been exploited to cause memory corruption, potentially leading to an exploitable condition. References Bug 1951554 CVE-2025-3608
April 15, 2025 at 1:49 PM