Pale Moon Version 35.0.0 Released with Security Updates

  Pale Moon has been updated to version 35.0.0.  This is a milestone update, primarily focused on web compatibility.

In addition to new features and a long list of changes/fixes, the update includes the following security fixes:

Security fixes:

• Updated the internal json viewer for better handling of resources.
• Updated NSS to 3.90.14.0 (UXP) to pick up several security fixes.
• As usual, many potential security reports/issues were examined and ported where applicable to our code.
• Security issues addressed: CVE-2026-74982, CVE-2026-74969 (DiD), CVE-2026-74977 (DiD), CVE-2026-74945, CVE-2026-74964, CVE-2026-74971, CVE-2026-74943, and several others that did not have a CVE designation at the time of evaluation.

*DiD: This means that a fix is "Defense-in-Depth": It is a fix that does not apply to a (potentially) actively exploitable vulnerability in Pale Moon, but prevents future vulnerabilities caused by the same code, e.g. when surrounding code changes, exposing the problem, or when new attack vectors are discovered.

Pale Moon includes both 32- and 64-bit versions for Windows: Pale Moon for Windows downloads.

Update: To get the update now, select "Help" from the Pale Moon menu at the upper left of the browser window.  Select About Pale Moon > Check for Updates.

Release Notes
Release Cycle

Remember - "A day without laughter is a day wasted."