Firefox 159 fixes 167 safety flaws, together with 13 sandbox escapes
What’s new in Firefox 159?
Passwords saved in Firefox can be found within the sidebar with out you first having to allow the password instrument within the sidebar. In different phrases, the sidebar password app is enabled by default—even for those who don’t save your passwords in Firefox in any respect.
The AI-based Good Window characteristic is designed to observe web sites for modifications, akin to new weblog posts or worth modifications. This characteristic is being rolled out progressively, so it’s not but accessible to all customers.
Safety vulnerabilities fastened in Firefox 159
Within the safety advisory for Firefox 159, Mozilla lists 167 safety vulnerabilities which have been fastened. Of those, 65 have been found and reported by exterior safety researchers. As soon as once more, Amy Burnett from OpenAI stands out with seven studies.
Mozilla classifies 108 vulnerabilities as excessive danger, 52 as medium danger, and 7 as low danger. Among the many fastened safety vulnerabilities are 97 use-after-free (UAF) vulnerabilities, a few of which could possibly be appropriate for injecting and executing malicious code. 13 vulnerabilities alone could possibly be exploited to flee the browser’s sandbox.
Firefox ESR updates
Along with Firefox 159.0, the ESR releases 153.6.0 and 115.44.0 are additionally accessible. Nevertheless, the latter are solely accessible for Home windows 7 and eight.1 and macOS 10.12 to 10.14, and can stay so till March 2027.
Within the ESR variations, Mozilla has fastened these of the above-mentioned vulnerabilities which might be additionally current within the code of those older browser generations. That quantities to 145 vulnerabilities patched in Firefox 153.6.0 and 80 vulnerabilities in Firefox 115.44.
