All Products Community Forum

Hi, During some tests I found that FF 115.19.0esr can still execute arbitrary JS similarly to CVE-2024-4367. I’ve checked the versions and > 115.11esr should be patched. Any payload with ‘/JS’ taken from https://github.com/luigigubello/PayloadsAllThePDFs/tree/main will do. Since this is probably important – FontMatrix is *not* working (no JS), original PoC (https://codeanlabs.com/wp-content/uploads/2024/05/poc_generalized_CVE-2024-4367.pdf) is also *not* working. I also wasn’t able to call an external script and so far haven’t found any path to exploit it beyond an alertbox. However, it still bothers me a lot and I’d like to know whether it’s the correct, expected behavior with FF+pdf.js, is it a vulnerability, or maybe my browser was somehow corrupted or is using some other mechanism that’s not within your control (my settings? about:config?).

Steps to re-create: 1. Open file in notepad 2. Add ‘/OpenAction 99 0 R’ after ‘lang’ in ‘1 0 obj section’ 3. After ‘endobj’ add ‘99 0 obj <</Type /Action /S /JavaScript /JS (app.alert\(1\);)>>’ 4. Result – alertbox popping twice

Dear Sir,

Firefox is not working with Rabby Wallet and Metamask extensions.

It does no pop-up the window to see the transaction and sign it. Firefox 134.0.1 (64-bit). Windows 10 Home.

On Metamask at least I can click on the pinned extension and see the window. However it´s not the expected behavior, because it should open the pop-up automatically. With Rabby wallet it is impossible to proceed, even clicking on the extension icon.

Please fix it.

Firefox kicks me out! My Mac works like a charme without any hardware problems. But now my favorite browser (FF) quits support. I'm amazed that a project like Mozilla does not care about sustainability. Any update in the software world must take care concerning downward compatibility - otherwise you exclude former users/customers. So why is ESR for Macos 10.9 to 10.11 not supported anymore? There are millions of Core2Duo-machines, that Mozilla sends to the trash. I'm extremely disappointed!

I have just got a new laptop and installed everything in relation to Firefox onto it. I have used the Nordpass extension for a couple of years and on the old laptop this is version 5.23.13 updated 16/10/24. On visiting the add-on and extension site today there is only a legacy version 4.33 updated 2y ago which clearly no longer works. Where has it gone. Clearly I am going to ask the same question of Nord, but I hope you can help.

I am running Windows 11, with Firefox 97.0 ("Up To Date"), but the installer for the new 115 ESR does not work.

The installer (Firefox Setup 115.18.0.esr.exe) seems to think that my system is running Windows 7 and does not proceed.

I was on the ESR channel and after the recent updates to 142.01 or 141 the ESR is missing from the about Firefox. I had got the tab groups option a few updates back and liked it. This latest update changed how a tab group collapses, instead of showing only the tab group name and collapsing all the tabs it leaves one open wasting space when I have several other tabs open. At least I don't see any sign of the annoying AI junk getting in the way yet. I thought you had a choice to stay on the ESR channel according to this link and others. https://support.mozilla.org/en-US/kb/firefox-support-windows-10-end-support I'll probably be forced to update to Windows 11 to do my taxes next year but I thought at least I could stay on the ESR channel to avoid new features getting in the way.

Hi,

I am the developer of the Dictionary Anywhere extension which is a Firefox recommended extension. Recently my extension stopped performing up to its expectations due to backend changes in public API that it uses to find meaning of the words.

However, I am unable to modify the code of extension to fix the issue as I am not able to login to my account due to it being behind MFA, and I have lost access to the phone which contains those MFA codes.

Can something be done here, to allow me to update the extension to rectify the issue that 50k users who use this extension regularly are facing? For example, can the extension be transferred to another account through which it can be updated, lots of users are suffering as the extension is not working. I have access to the source code of the extension .

Thanks and Regards

Hi Mozilla Team / Community,

We understand that Firefox 115 ESR will receive security updates until at least version 115.27.0esr in August 2025.

We currently have a number of devices still running Windows 7 for legacy application reasons and rely on Firefox 115 ESR as it's the last version to support that OS.

We need to plan ahead, so could you please confirm:

Will Mozilla continue to support Windows 7 with Firefox 115 ESR updates until August 2025?

Or is support for Windows 7 ending sooner, even if 115 ESR itself continues?

I received two good responses but the projected end dates of August or September concern me. What happens after that? Is there any solid plan now to extend that or another version 115? Or should I go to another browser - then the issue would involve transfer of the bookmarks from Firefox to a different one and how long will it work with Windows 7? I need to continue using 7 at least for the next year or two. Suggestions?

Because the economy, inflation, and lower incomes are still a major problem, many users like myself need to continue using old computers that can only run Windows 7. So we need Firefox ESR 115 to continue being supported with updates for at least a couple more years.

Like probably a Lot of you I don't support the unethical So-called "Forced-obsolescence" and am not planning to "upgrade" Microsoft every 18 months or so for the next 90 years on each on Every single family Computer and give in to their Scare tactics for financial, environmental and Ethical reasons.

I am currently running Firefox "Extended Support," or ESR, I think it's called. Was wondering, If I ever **DO** decide to upgrade our bloatware Spyware operating system(s), basically if they break enough Apps like Apple Likes to do to force an upgrade, how difficult or easy would it be to Migrate from ESR to the latest regular version of Mozilla/Firefox...with all my Settings, etc. still in place?

So, as has been announced, FireFox 115 ESR will get updates until septempber 2025. This deadline has been extended multiple times. What factors are being taken in consideration when deciding whether to extend support again? With server 2008 updates you can get windows 7 up to date until 2026, sort of. Ending support in september would still be sad, because people too stubborn or not willing to upgrade probably still wont when support of firefox ends. I am a firefox on windows 7 user myself too, and it would be sad if they dropped support. Ill have to use a backported fork by the community

So thats my question, what factors matter in terms of extending 115 esr support again?

After the last update Firefox ESR 115.23.0 the menu on the website: https://connect.garmin.com/modern/home is not displayed correctly. Can you fix this?

I have DLink webcams around my home and I can no longer access their web pages to control them because of certificate issues. I have no success with Microsoft Edge running in IE mode either. Using IE mode I am able to get into two of my D-Link Camera’s web pages but with the other two (one of which is my newest camera) I get this message:

The browser you are using may have difficulty receiving images and video. If you experience any issues viewing this page, we suggest using Internet Explorer.

When I go to the MyDlink website using Firefox Version 128.5.2 ESR I get this message:

Unsupported Browser or Operating System Detected! We recommend you use Firefox 12-51/52 ESR on Windows or MacOS to access the mydlink portal.

Is there a way for me to get the Firefox version they recommend?

Like many others I've seen here in this forum and some others, I still run Windows 7. I will _NEVER_ buy another Microsoft OS ever, again! And that goes even if I wasn't a senior on a fixed income.

That said, like many others, I would very much appreciate the ESR version of Firefox being extended for the foreseeable future beyond the 6-month extension that you just posted about. I use many of the extensions quite copiously and can't even think of not using them as some are so extremely protective and some are especially utilitarian, at that. A lot of them are not supported on other browsers even IF those browsers have extensions at all. I've used Firefox since Version 2.

Now, in case this is pertinent:

I lock the desktop computer [that I built, myself] down seriously tight with several good quality but free 3rd party soft-wares which overlap protection just enough to keep my computer safe but not so much as to conflict. I've formulated my "cocktail" over the past 30 years since I started with Windows 95 through XP and now 7.

I do NOT do bu$ine$$ of any kind on line. I do not peruse the back alleys of the internet and I'm not interested in the Black Web. I don't even use on board e-mail opting for on-line email that, again, I do not do bu$ine$$ through and don't open anything that comes in that I don't know the party which sent it. (I do find some of the scam spam rather amusing, though. LOL!) In other words, I follow all best practices other than falling into the update trap that MS has created for end users due to their incessant greed.

When or, maybe, just before I can no longer get on the internet at all with Windows 7, I WILL do my best to complete my switchover to Linux for the few on line activities that I enjoy. In the long run, I plan on utilizing a multi-boot configuration as I have software for Windows XP that I find either very useful or very amusing that won't run on 7 or Linux. I also have some software that I like for Windows 7 that won't run on Linux. I'm just not ready to do that now and won't be for quite a while in the future as I continue to learn about and how to administrate my future chosen distro of Linux as I can Windows.

All of this is why I'm asking for your patience and continued support for Firefox ESR on older OSes.

Hi, first time writing here so I don't know what to do or expect. I recently received a warning by Firefox that as of March 14, 2025 Firefox will end support for Windows 8 (8.1 and below too) and that the last version compatible with Windows 8 is Firefox 115ESR (up to which? Before in Settings Firefox wanted to update from 115.0.3 to 115.0.3ESR now it says 115.1ESR - is this still ok for Windows 8? Are all 115 versions ok or not? Please help because I'm not a computer person, at all, with far too many gaps). Also, what happens after March 14, 2025? Will I be able to keep using Firefox 115ESR version even if I won't be getting any more updates or not? Also, I have extensions (4 ad blockers+Ghostery+VideoDownload helper) which keep updating and the warning said that extensions may not work properly anymore - so I wonder if you know if these above mentioned will in fact be affected or not, because I don't know whether to update them after March 14, 2025 or not because I'm not sure how to go back to a previous version should they not work. Too, I would like to say that you suggest switching to a newer Windows ver. (10 or above) but not everyone really wants to for one reason or another. Personally I find myself fine with Win 8 so far and don't like Win 10 while Win 11 may be too much for my old computer and I cannot afford to buy another. Also I would not attempt to upgrade to Win 10 without help (considering that others more expert had difficulties making it work or reverting back to Win 8) help that I do not have, at all - that's why I'm here now, and I don't really understand how this works either, so... Anyhow, reading on that warning page that after March 14, 2025 you would reconsider your position regarding support for Win 8.1, 8 and below (and knowing also that Chrome and Edge have ended their support - effectively leaving users stranded or forcing them to upgrade to a Windows version unwillingly) I would like to plead with you NOT to follow their example and help us, your supporters, keep using Firefox (which you say is for the people) - like I said many of us have good reasons for keeping on using Win 8.1 or below, so won't you please, PLEASE help us keep Firefox as our browser so that we too may keep using Internet? I know technology goes forward and staying behind makes all more difficult but not all can afford the same things and since I have found that there are a few of us yet I am asking to PLEASE not abandon us as others have done (leaving us to manage the best we can) but consider our plight (I know it might be a challenge for the engineers and developers but surely you can find a solution at least to allow us to keep using Firefox). Thank you.

Hello,

I have an old version of MAC Os El Capitan 10.11.6, which new version of Mozilla can I install to respect new security standards ?

Thanks for your help