Firefox 149 Adds Browser-Only VPN and Fixes 46 Security Flaws

Summary
Firefox 149 adds a browser-only VPN with up to 50 GB of monthly traffic, blocks notifications from SafeBrowsing-flagged sites, and fixes 46 security vulnerabilities, more than half rated high severity.
Key points
- The built-in VPN routes Firefox traffic through a U.S.-based secure proxy; it does not cover other applications.
- Users with a Mozilla account get up to 50 GB of monthly traffic and can enable the VPN for up to five specific sites.
- Mozilla says the feature will roll out progressively in the U.S., UK, Germany, and France; no wider expansion timeline was given.
- Mozilla says it may collect technical service-performance data and usage interaction data, such as connection status and daily data use.
- Firefox now blocks notifications and revokes permissions for sites flagged as malicious by SafeBrowsing.
- Firefox 149 fixes 46 security vulnerabilities, more than half rated high severity; listed flaw types include use-after-free, out-of-bounds, JIT engine, and sandbox escape issues.
Article Details
- Event Type
- Firefox 149 release introducing a built-in browser VPN, Split View, notification protections, and security fixes.
- Impact
- Firefox users can route browser traffic through a U.S.-based secure proxy, with up to 50 GB of monthly traffic and controls for enabling the VPN on up to five sites. The release also blocks notifications and revokes permissions for sites flagged as malicious by SafeBrowsing, and fixes 46 security vulnerabilities, more than half rated high severity.
Vendors
Products
Mozilla FirefoxMozilla released Firefox 149, which adds a built-in browser VPN providing up to 50 GB of monthly traffic and a new Split View tab layout.Mozilla VPNThe feature uses a secure proxy server to route only traffic from the browser, unlike the company’s commercial Mozilla VPN, which covers system-wide traffic.SafeBrowsingThe VPN routes only Firefox traffic through a U.S.-based secure proxy with per-site and toggle controls, and Firefox 149 also blocks notifications from SafeBrowsing-flagged sites while fixing 46 security vulnerabilities.
Countries
FranceThe feature will roll out progressively to users in the U.S., UK, Germany, and France.GermanyThe feature will roll out progressively to users in the U.S., UK, Germany, and France.United KingdomThe feature will roll out progressively to users in the U.S., UK, Germany, and France.United StatesThe VPN routes only Firefox traffic through a U.S.-based secure proxy with per-site and toggle controls, and Firefox 149 also blocks notifications from SafeBrowsing-flagged sites while fixing 46 security vulnerabilities.
