Pale Moon Version 33.5.1 Released with Security Update

[Corrine]

Pale Moon has been updated to version 33.5.1. This is a minor security and bug fix update.

 

Changes/fixes:

• Changed the way cookies are handled internally to fix an issue with cookie database corruption as a result of updates to domain suffixes.
• Fixed an issue with Alternative-Services protocol negotiation.
• Fixed a potential crash scenario with Structured Clone operations. *DiD
• Fixed a potential issue with line breaking if out of memory.
• Fixed a rare crash with opportunistic encryption.
• Minor code cleanup.
• Security issues addressed: CVE-2025-0239 and CVE-2025-0238.
  

Notes: *DiD This means that a fix is "Defense-in-Depth": It is a fix that does not apply to a (potentially) actively exploitable vulnerability in Pale Moon, but prevents future vulnerabilities caused by the same code, e.g. when surrounding code changes, exposing the problem, or when new attack vectors are discovered.

Pale Moon includes both 32- and 64-bit versions for Windows: Pale Moon for Windows downloads.

 

Update: To get the update now, select "Help" from the Pale Moon menu at the upper left of the browser window. Select About Pale Moon > Check for Updates.

 

Release Notes
Release Cycle