winget install --id MoonchildProductions.PaleMoonAbout Pale Moon
Pale Moon is an Open Source, Goanna-based web browser available for Microsoft Windows and Linux (with other operating systems in development), focusing on efficiency and ease of use. Pale Moon offers you a browsing experience in a browser completely built from its own, independently developed source that has been forked off from Firefox/Mozilla code a number of years ago, with carefully selected features and optimizations to improve the browser's stability and user experience, while offering full customization and...
What's new in 34.3.2
This is a security and minor web compat release. Changes/fixes: - Implemented the URL.Parse() convenience function. - Added multiple bounds checks on internal browser functions to avoid potential out-of-bounds accesses, underflows and overflows. (DiD) - Fixed several issues with loading and parsing content-supplied fonts. - Set a bottom limit on the frequency for audio samples to avoid a whole class of potential bugs surrounding audio loading, processing and playback. Audio formats with a sample rate below 8kHz (the commonly accepted lowest sample rate of "telephone"/"walkie-talkie" quality) are now rejected. - Fixed a potential issue in CSS rounded corners with dotted styling. - Image elements in forms are no longer associated if they are not in the same subtree. - Made image animation checks more strict to avoid potential issues if decoding would be slow. - Video region checks are now more strict to avoid issues with malformed video files. - Updated NSS to 3.90.13.0 (UXP) addressing all applicable security issues from NSS upstream. - Another large security audit of over 200 sec bugs in Mozilla land has been performed, with the vast majority not being applicable to our code base (primarily e10s/IPC bugs). - Security issues addressed: CVE-2026-16353, CVE-2026-16408, CVE-2026-16389 and many others that do not have a CVE designation.
Version history
| Version | Updated | Notes |
|---|---|---|
| 34.3.2 | Unknown | This is a security and minor web compat release. Changes/fixes: - Implemented the URL.Parse() convenience function. - Added multiple bounds checks on internal browser functions to avoid potential out-of-bounds accesses,... |
| 34.3.1 | Unknown | This a security and bugfix release. Changes/fixes: - Pale Moon will now exclude local resources from <base> CSP checks, aligning it with the rest of CSP handling. - Fixed an issue where the devtools JSON viewer would, in... |
| 34.3.0.1 | Unknown | This is a small update to address 2 important usability/stability issues. Changes/fixes: - Fixed intermittent JavaScript engine crashes due to the newly-implemented FinalizationRegistry code. - Fixed a webaudio channel m... |
| 34.3.0 | Unknown | This is a major development, bugfix and security release. Special thanks to all the contributors (you know who you are!) for major work done on the platform internals this cycle, making Pale Moon better than ever :) New... |
| 34.2.2 | Unknown | This is a stability and security release. Changes/fixes: - Fixed a regression in 34.2.1 that would cause crashes to desktop when using certain extensions or visiting certain websites. - Fixed potential security issues wi... |
| 34.2.1 | Unknown | This is a bugfix and security release. Note for FreeBSD users: our binaries from this version forward require FreeBSD v14 or later. Changes/fixes: - Fixed a regression leading to cursive languages (where multiple charact... |
| 34.2.0 | Unknown | This is a development, bugfix and security update. New features: - Implemented ES2018 Proxy ownKeys duplicate-key invariant. - Implemented ES2022 Error.cause property. - Implemented support for oklab and oklch color spac... |
| 34.1.0 | Unknown | This is an important update landing technological enhancements previously intended to be in the v34.0 milestone. New features: - Re-landed Xoroshiro128++ JavaScript PRNG to make it more robust while keeping high performa... |