Tuesday, July 08, 2025

Microsoft July 2025 Security Updates

 

The Microsoft July 2025 security updates have been released and consist of 130 new CVEs to Microsoft products. With the additional 10 non-Microsoft CVEs being documented, it brings the combined total to 140 CVEs.


Of the Microsoft CVEs released, 10 are rated critical and the rest are rated important in security. At the time of release, one is listed as being publicly known and none are listed as under active attack.

The security updates apply to the following products, features and roles: Windows and Windows Components, Office and Office Components, .NET and Visual Studio, Azure, Teams, Hyper-V, Windows BitLocker, Microsoft Edge (Chromium-based), and the Windows Cryptographic Service.

See the list of KBs at the bottom of the page at July 2025 Security Updates - Release Notes - Security Update Guide - Microsoft for information regarding known issues with the security updates.

Recommended Reading:   See Dustin Childs review and analysis in Zero Day Initiative -- The July 2025 Security Update Review.

Additional Update Notes:

 

References




Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...

Mozilla Firefox Version 140.0.4 Released with Updates

  Mozilla sent Firefox Version 140.0.4 to the Release Channel.

Fixed

  • Fixed incorrect font selection in some cases when attempting to use color fonts. (Bug 1971053)
  • Fixed the search results not updating when switching source during a file search in the Developer Tool's debugger. (Bug 1971094)

Update: To get the update now, select "Help" from the Firefox menu, then pick "About Firefox".  Mac users need to select "About Firefox" from the Firefox menu.  For non-English versions, Fully Localized Versions are available for download.

Release Notes


Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...

Tuesday, July 01, 2025

Pale Moon Version 33.8.0 Released with Security Updates

 Pale MoonPale Moon has been updated to version 33.8.0. This is a major development, bugfix and security release.

The update includes DiD fixes. This means that a fix is "Defense-in-Depth": It is a fix that does not apply to a (potentially) actively exploitable vulnerability in Pale Moon, but prevents future vulnerabilities caused by the same code, e.g. when surrounding code changes, exposing the problem, or when new attack vectors are discovered.

See the Release Notes for numerous changes/fixes included in the update as well as Implementation Notes.

Pale Moon includes both 32- and 64-bit versions for Windows: Pale Moon for Windows downloads.

Update: To get the update now, select "Help" from the Pale Moon menu at the upper left of the browser window.  Select About Pale Moon > Check for Updates.

Release Notes
Release Cycle

Home
Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...