All Products Community Forum

I would like to know how the Firefox CVEs are affected on its version which are mentioned in NVD.

Let take mfsa2025-59, for example CVE-2025-8040, as per the NVD its says Firefox ESR < 140.1 is affected so does that mean it affect all the version which are lower than 140.1 which included the ESR 128 and ESR 115 versions or just the ESR 140 version series? then it raise on more question check this cve-2025-8029 in NVD it has specifically mentioned it only affect "Firefox ESR < 128.13, Firefox ESR < 140.1" and not the ESR 115 versions. Could anyone confirm it does not affect the ESR 115 versions or it affect all the versions? Now check this one cve-2025-8027, NVD clearly mentioned "Firefox ESR < 115.26, Firefox ESR < 128.13, Firefox ESR < 140.1" are affected so what I understand is that if the Firefox ESR 115 is vulnerable to any CVE it would be mentioned in the NVD specifically.

My point is that if any Firefox CVEs are listed in NVD and it specify only one version like “Firefox ESR < 140.1” what does that mean? Does it affect all the versions which include ESR 128 and ESR 115 or just the ESR 140 series version only affected? If any CVEs are affected on the ESR 115 and ESR 128 does Mozilla specifically mentioned those versions are affected right? Just like its mentioned in the cve-2025-8027

Any help would be appreciated to clarify this.

I keep getting a message when loggin into my gmail account to enable cookies. I'm using firefox so I assume that's where it want cookies enabled but I don't find a setting for it

I previously posted this question: https://support.mozilla.org/en-US/questions/1495577

Asking how to use the "intl.accept_languages" setting within the JSON for the new preferences setting within group policy.

A moderator posted this as a comment which I have only just noticed: "The value is a string, so it has to be in quotes "en-GB"" - the post is now too old for me to reply.

I'm still having issues using this setting even after putting the name in quotes. I've tried:

"intl.accept_languages": { "Value": "en-GB", "Status": "user" }

"intl.accept.languages": { "Value": "en-GB", "Status": "user" }

But neither work, please can someone clarify what exactly needs to be used within the JSON?

Hello,

I had issue to verify the cert on android app for https://partners-enrichment.heytelecom.be. On Windows I didn't have the same issue.

version 144.0.2 / build id 20251027123126 / target arm64-v8a armeabi-v7a x86_64 Device: Samsung S22 / One UI 7.0 / Android version 15 / version S901U1UES8FYI2 / Security patch level September 1, 2025

Error: Secure Connection Failed, because its certificate issuer is unknown, the certificate is self-signed, or the server is not sending the correct intermediate certificates.

CertChain RCA: DigiCert Global Root G2 DCA: DigiCert Global G2 TLS RSA SHA256 2020 CA1 cert: partners-enrichment.heytelecom.be

1) I couldn't check the cert from the gui as on windows. Shield in search bar / Connection not secure doesn't opened the cert. Is it expected?

2) I found this helppage: https://support.mozilla.org/en-US/kb/setting-certificate-authorities-firefox

Unfortunately about:preferences isn't available on android (ref. https://www.reddit.com/r/firefox/comments/u593x0/how_to_access_to_aboutpreferences_on_android/)

I see in about:certificate which is the correct RCA (I verified the pem file with the root). DigiCert Global Root G2

Where do I check the Intermediate CA's (DCA)?

3) When exporting the RCA it has been download as: digicert-global-root-g2.pem.txt Why the txt at the end?

On Windows it downloads as digicert-global-root-g2.pem

Kind regards,

I am working on a stig for Mozilla Firefox and I'm trying to do a scap compliance scan but or some reason I am getting a score of zero on all systems. We do patch regularly and at some point one of the version upgrades caused our compliance scans stopped working. I need a fix and cannot find anything when searching for this issue.

I am logged on to my Credit Union and attempt to download my statements. When using Firefox I get the message: {"Errors":["Authorization has been denied for this request."]}

When I contacted my CU, they said to add an URL to the Manage Exceptions. This worked, but I want to know why Firefox needs this but Chrome doesn't.

Dear Sir or Madam,

We are experiencing an issue with various users on our terminal servers whereby websites open very slowly when using Firefox. When I access the website using Edge from the same user session, everything works very quickly. We have already tried creating a new profile in Firefox and clearing the cache, but without success. Could you please help us?

The operating system used is Windows Server 2022.

I constantly get pop ups for AI i don't want and the AI makes firefox slower. I don't see a use in AI integration with Firefox and I would like to disable it. How can i do this?

MB is telling me to put MB on Firefox! BUT, I already have MB on Firefox. Can you help me.

Thank you,

Tom Klima [edited email from public forum]

if Mozilla continues on its path of adding new AI features into Firefox, i am going to switch browsers. I stopped using chrome, i can stop using Firefox too. Nobody using Firefox needs more AI features. Nobody using Firefox needs a "modern AI browser", as there's already about 10 browsers filled to the brim with AI slopware. this is an extremely disappointing turn for Mozilla to take and I'm hoping they realize their mistakes before it's too late.

I use firefox as my browser of choice because it seems to be the only large browser not yet completely flooded with AI slop and bloatware. I'm incredibly disappointed that the new direction seems to be "becoming a modern AI browser". I don't care if I can opt-in or opt-out of AI tools for my personal browser experience - simply their presence presents a safety, efficiency, ethical and privacy concern.

The ONE THING that puts firefox above other browsers and why it is gaining more users recently is because it hasn't jumped into the AI-toilet along with Chrome etc. Yet. If Firefox moves forward with the implementation of more AI tools, regardless of individual opt-in options, I will have no choice but to stop using firefox. I am simply not interested in wading through excrement.

How to get rid of "Your browser is being managed by your organization"? This thing is driving me crazy(er)! Please 'dumb down' your reply, as I am not computer literate. If it's a malicious attack, my anti-virus is not picking it up. Thanks!