Firefox Community Forum

Hi, During some tests I found that FF 115.19.0esr can still execute arbitrary JS similarly to CVE-2024-4367. I’ve checked the versions and > 115.11esr should be patched. Any payload with ‘/JS’ taken from https://github.com/luigigubello/PayloadsAllThePDFs/tree/main will do. Since this is probably important – FontMatrix is *not* working (no JS), original PoC (https://codeanlabs.com/wp-content/uploads/2024/05/poc_generalized_CVE-2024-4367.pdf) is also *not* working. I also wasn’t able to call an external script and so far haven’t found any path to exploit it beyond an alertbox. However, it still bothers me a lot and I’d like to know whether it’s the correct, expected behavior with FF+pdf.js, is it a vulnerability, or maybe my browser was somehow corrupted or is using some other mechanism that’s not within your control (my settings? about:config?).

Steps to re-create: 1. Open file in notepad 2. Add ‘/OpenAction 99 0 R’ after ‘lang’ in ‘1 0 obj section’ 3. After ‘endobj’ add ‘99 0 obj <</Type /Action /S /JavaScript /JS (app.alert\(1\);)>>’ 4. Result – alertbox popping twice

Firefox kicks me out! My Mac works like a charme without any hardware problems. But now my favorite browser (FF) quits support. I'm amazed that a project like Mozilla does not care about sustainability. Any update in the software world must take care concerning downward compatibility - otherwise you exclude former users/customers. So why is ESR for Macos 10.9 to 10.11 not supported anymore? There are millions of Core2Duo-machines, that Mozilla sends to the trash. I'm extremely disappointed!

Dear Sir,

Firefox is not working with Rabby Wallet and Metamask extensions.

It does no pop-up the window to see the transaction and sign it. Firefox 134.0.1 (64-bit). Windows 10 Home.

On Metamask at least I can click on the pinned extension and see the window. However it´s not the expected behavior, because it should open the pop-up automatically. With Rabby wallet it is impossible to proceed, even clicking on the extension icon.

Please fix it.

Bank Accounts: I can no longer access my Bank accnts online. My Bank says they no longer support my current version (ESR) & I must upgrade in order to access accnts online. Don't know what to do.

Hi Mozilla Team / Community,

We understand that Firefox 115 ESR will receive security updates until at least version 115.27.0esr in August 2025.

We currently have a number of devices still running Windows 7 for legacy application reasons and rely on Firefox 115 ESR as it's the last version to support that OS.

We need to plan ahead, so could you please confirm:

Will Mozilla continue to support Windows 7 with Firefox 115 ESR updates until August 2025?

Or is support for Windows 7 ending sooner, even if 115 ESR itself continues?

I was on the ESR channel and after the recent updates to 142.01 or 141 the ESR is missing from the about Firefox. I had got the tab groups option a few updates back and liked it. This latest update changed how a tab group collapses, instead of showing only the tab group name and collapsing all the tabs it leaves one open wasting space when I have several other tabs open. At least I don't see any sign of the annoying AI junk getting in the way yet. I thought you had a choice to stay on the ESR channel according to this link and others. https://support.mozilla.org/en-US/kb/firefox-support-windows-10-end-support I'll probably be forced to update to Windows 11 to do my taxes next year but I thought at least I could stay on the ESR channel to avoid new features getting in the way.

Because the economy, inflation, and lower incomes are still a major problem, many users like myself need to continue using old computers that can only run Windows 7. So we need Firefox ESR 115 to continue being supported with updates for at least a couple more years.

So, as has been announced, FireFox 115 ESR will get updates until septempber 2025. This deadline has been extended multiple times. What factors are being taken in consideration when deciding whether to extend support again? With server 2008 updates you can get windows 7 up to date until 2026, sort of. Ending support in september would still be sad, because people too stubborn or not willing to upgrade probably still wont when support of firefox ends. I am a firefox on windows 7 user myself too, and it would be sad if they dropped support. Ill have to use a backported fork by the community

So thats my question, what factors matter in terms of extending 115 esr support again?

My MacOS is 10.13.6 (cannot go higher on this machine). Since update to 15.119.0esr, embedded map graphics are no longer showing. The map graphic sub-window instead shows "Sorry, we have no imagery here" in several places across the map. I am getting the same for multiple websites, including the location maps in Zillow.com . Google Maps works fine, and I think the problem is isolated to maps embedded in pages. Did not have this issue last week, prior to updating to 15.119.0esr. This is SO BAD that if it's not fixable, I want to revert to 15.118...

Glenn Schaffer Email removed for privacy

I've been a long time supporter of Firefox and it's taken me a few years get all the bugs out of Win 7 so I'm not going to repeat that on Win X. My Win7_64 water cooled platform is overclocked, stable, and just as fast as most affordable new chipsets from Intel. I have third party security apps and firewall. I'm not downgrading to Windows X whatever later version that is and I'm considering other browser options, if anybody has ideas?

Although I'm on the ESR channel, I've been using User Agent Switcher for a while, which seems to work well on most sites. I also notice DuckDuckgo browser claims to support Win 7. I will miss Firefox, but switching to a Win7 supported browser would be my first option, then Linux if I have to dump Windows 7 for something else.

Developers will moan and say switch to Win X with the favorite phrase 'Upgrade' when my experience has been the opposite, but what do others feel who are using older versions of Windows?

After the last update Firefox ESR 115.23.0 the menu on the website: https://connect.garmin.com/modern/home is not displayed correctly. Can you fix this?

Chase website now requires Mozilla Firefox update 128 or higher to access accounts. My version says my version (115.30) is latest update. Do I need to find a different browser or is there a solution? I am using Windows 7 Pro desktop. Thank you.

thank you for your time & expertise:) Can you please help me understand what would happen if firefox stops supporting windows 7 users. Will i still be able to use the browser - just with less security? I will probably have to give up using a computer if I cant continue with Windows 7 so I'd even be prepared to pay an annual fee to keep the support going. Look forward to hearing from you, thanks Julie

Is this 115.32 still in effect for my macOS 10.13 ? Or is it xld as it would be in Feb 2026?

Did or does Firefox 115.32 afford my apple macOS 10.13 enough security until I purchase a new computed.. How much more time do I have.

Hello,

I'm using Linux Mint 17.3 (Rosa). Firefox version is 78.7.1 esr-linux amazon. I want to update to the latest Firefox that would work with this version of Linux Mint. It seems maybe this can't be done anymore. Looking at Firefox software on the machine, it says it's Up to Date. I really still want to update it. I know Mint 17.3 is really old and will replace it. Firefox does work, but I'm now getting sluggish Internet because Firefox can't handle all the security requirements. So many web pages don't very well anymore. Can someone help?