All Products Community Forum

I would like to know how the Firefox CVEs are affected on its version which are mentioned in NVD.

Let take mfsa2025-59, for example CVE-2025-8040, as per the NVD its says Firefox ESR < 140.1 is affected so does that mean it affect all the version which are lower than 140.1 which included the ESR 128 and ESR 115 versions or just the ESR 140 version series? then it raise on more question check this cve-2025-8029 in NVD it has specifically mentioned it only affect "Firefox ESR < 128.13, Firefox ESR < 140.1" and not the ESR 115 versions. Could anyone confirm it does not affect the ESR 115 versions or it affect all the versions? Now check this one cve-2025-8027, NVD clearly mentioned "Firefox ESR < 115.26, Firefox ESR < 128.13, Firefox ESR < 140.1" are affected so what I understand is that if the Firefox ESR 115 is vulnerable to any CVE it would be mentioned in the NVD specifically.

My point is that if any Firefox CVEs are listed in NVD and it specify only one version like “Firefox ESR < 140.1” what does that mean? Does it affect all the versions which include ESR 128 and ESR 115 or just the ESR 140 series version only affected? If any CVEs are affected on the ESR 115 and ESR 128 does Mozilla specifically mentioned those versions are affected right? Just like its mentioned in the cve-2025-8027

Any help would be appreciated to clarify this.

if Mozilla continues on its path of adding new AI features into Firefox, i am going to switch browsers. I stopped using chrome, i can stop using Firefox too. Nobody using Firefox needs more AI features. Nobody using Firefox needs a "modern AI browser", as there's already about 10 browsers filled to the brim with AI slopware. this is an extremely disappointing turn for Mozilla to take and I'm hoping they realize their mistakes before it's too late.

I keep getting a message when loggin into my gmail account to enable cookies. I'm using firefox so I assume that's where it want cookies enabled but I don't find a setting for it

When I play YouTube videos in Firefox, the video stutters and drops frames, even at 480p. Audio keeps playing normally. This does not happen in Chrome on the same computer. The issue started about a week ago. I’m using Firefox on Windows 11 on a laptop. Restarting Firefox did not fix it.

I just want to say that if Firefox goes through with this AI bs, I will promptly be finding a new browser. The whole point of me using Firefox is it is the best browser for privacy, which I care about greatly. AI integration and personal privacy are mutually exclusive; they can't exist without each other. So do not become an "AI browser," or whatever the CEO called it. It is only going to kill a great product that is basically the only thing stopping google from having a web browser monopoly.

I previously posted this question: https://support.mozilla.org/en-US/questions/1495577

Asking how to use the "intl.accept_languages" setting within the JSON for the new preferences setting within group policy.

A moderator posted this as a comment which I have only just noticed: "The value is a string, so it has to be in quotes "en-GB"" - the post is now too old for me to reply.

I'm still having issues using this setting even after putting the name in quotes. I've tried:

"intl.accept_languages": { "Value": "en-GB", "Status": "user" }

"intl.accept.languages": { "Value": "en-GB", "Status": "user" }

But neither work, please can someone clarify what exactly needs to be used within the JSON?

I use firefox as my browser of choice because it seems to be the only large browser not yet completely flooded with AI slop and bloatware. I'm incredibly disappointed that the new direction seems to be "becoming a modern AI browser". I don't care if I can opt-in or opt-out of AI tools for my personal browser experience - simply their presence presents a safety, efficiency, ethical and privacy concern.

The ONE THING that puts firefox above other browsers and why it is gaining more users recently is because it hasn't jumped into the AI-toilet along with Chrome etc. Yet. If Firefox moves forward with the implementation of more AI tools, regardless of individual opt-in options, I will have no choice but to stop using firefox. I am simply not interested in wading through excrement.

Hello,

I had issue to verify the cert on android app for https://partners-enrichment.heytelecom.be. On Windows I didn't have the same issue.

version 144.0.2 / build id 20251027123126 / target arm64-v8a armeabi-v7a x86_64 Device: Samsung S22 / One UI 7.0 / Android version 15 / version S901U1UES8FYI2 / Security patch level September 1, 2025

Error: Secure Connection Failed, because its certificate issuer is unknown, the certificate is self-signed, or the server is not sending the correct intermediate certificates.

CertChain RCA: DigiCert Global Root G2 DCA: DigiCert Global G2 TLS RSA SHA256 2020 CA1 cert: partners-enrichment.heytelecom.be

1) I couldn't check the cert from the gui as on windows. Shield in search bar / Connection not secure doesn't opened the cert. Is it expected?

2) I found this helppage: https://support.mozilla.org/en-US/kb/setting-certificate-authorities-firefox

Unfortunately about:preferences isn't available on android (ref. https://www.reddit.com/r/firefox/comments/u593x0/how_to_access_to_aboutpreferences_on_android/)

I see in about:certificate which is the correct RCA (I verified the pem file with the root). DigiCert Global Root G2

Where do I check the Intermediate CA's (DCA)?

3) When exporting the RCA it has been download as: digicert-global-root-g2.pem.txt Why the txt at the end?

On Windows it downloads as digicert-global-root-g2.pem

Kind regards,

I am working on a stig for Mozilla Firefox and I'm trying to do a scap compliance scan but or some reason I am getting a score of zero on all systems. We do patch regularly and at some point one of the version upgrades caused our compliance scans stopped working. I need a fix and cannot find anything when searching for this issue.

Hello Everyone,

I am seeking assistance to configure Firefox browser so that internet access is blocked when the browser cannot download or access the proxy Auto-configuration (PAC) file. Our organisation enforces all web traffic through proxy servers defined by a PAC file. For compliance and security reasons, users should not have any direct internet access unless the browser is able to successfully retrieve and apply the PAC file.

The desired behaviour is:

1. Firefox attempts to download the PAC file from a defined URL. 2. If the PAC file is unreachable or fails to load (e.g., due to network restrictions or the device being outside the corporate network), Firefox should "fail closed" - meaning it should not allow any direct internet traffic. 3. This is effectively a "fail-block" mode: no fallback to direct connections, and no cached or bypassed proxy settings should allow internet browsing.

This behaviour is critical to prevent devices from accessing the internet without applying corporate proxy rules. I would like to know:

1/ Whether Firefox currently supports a setting or policy that enforces this fail-block condition when the PAC file is unavailable. 2/ If not, whether there are recommended configurations or enterprise policies (e.g., via `policies.json` or Group Policy templates) that could achieve equivalent enforcement.

Thank you for your assistance and guidance.

I am logged on to my Credit Union and attempt to download my statements. When using Firefox I get the message: {"Errors":["Authorization has been denied for this request."]}

When I contacted my CU, they said to add an URL to the Manage Exceptions. This worked, but I want to know why Firefox needs this but Chrome doesn't.

MB is telling me to put MB on Firefox! BUT, I already have MB on Firefox. Can you help me.

Thank you,

Tom Klima [edited email from public forum]

Hopefully this may reach Mozilla Connect maintainers/developers. After posting a topic or a comment in Mozilla Connect, I struggled to find it. Somehow I found out there is a page "My Unmoderated Items", which is not referenced from my account, from main menu or anywhere reachable. Once you know the link or leave it open, it looks fine, but finding the page again is a real struggle.

Would you please add "https://connect.mozilla.org/t5/premod/moderationitemspage/tab/unmoderated:idea" to all relevant menus so that the user can find it easily?