Firefox 149 Adds Browser-Only VPN and Fixes 46 Security Flaws

· Original article ↗

Summary

Firefox 149 adds a browser-only VPN with up to 50 GB of monthly traffic, blocks notifications from SafeBrowsing-flagged sites, and fixes 46 security vulnerabilities, more than half rated high severity.

Key points

  • The built-in VPN routes Firefox traffic through a U.S.-based secure proxy; it does not cover other applications.
  • Users with a Mozilla account get up to 50 GB of monthly traffic and can enable the VPN for up to five specific sites.
  • Mozilla says the feature will roll out progressively in the U.S., UK, Germany, and France; no wider expansion timeline was given.
  • Mozilla says it may collect technical service-performance data and usage interaction data, such as connection status and daily data use.
  • Firefox now blocks notifications and revokes permissions for sites flagged as malicious by SafeBrowsing.
  • Firefox 149 fixes 46 security vulnerabilities, more than half rated high severity; listed flaw types include use-after-free, out-of-bounds, JIT engine, and sandbox escape issues.

Article Details

Event Type
Firefox 149 release introducing a built-in browser VPN, Split View, notification protections, and security fixes.
Impact
Firefox users can route browser traffic through a U.S.-based secure proxy, with up to 50 GB of monthly traffic and controls for enabling the VPN on up to five sites. The release also blocks notifications and revokes permissions for sites flagged as malicious by SafeBrowsing, and fixes 46 security vulnerabilities, more than half rated high severity.

Vendors

Products

Countries

Related Articles