Pale Moon is an Open Source, Goanna-based web browser available for Microsoft Windows, Linux and Android, focusing on efficiency and ease of use. Make sure to get the most out of your browser!
Pale Moon offers you a browsing experience in a browser completely built from its own, independently developed source that has been forked off from Firefox/Mozilla code, with carefully selected features and optimizations to improve the browsers speed, resource use, stability and user experience, while offering full customization and a growing collection of extensions and themes to make the browser truly your own.
- Optimized for modern processors
- Based on proprietary optimized layout engine (Goanna)
- Safe: forked from mature Mozilla code and regularly updated
- Secure: Additional security features and security-aware development
- Supported by our user community, and fully non-profit
- Familiar, efficient, fully customizable interface
- Support for full themes: total freedom over any elements design
- Support for easily-created lightweight themes (skins)
- Smooth and speedy page drawing and script processing
- Increased stability: experience fewer browser crashes
- Support for many Firefox extensions
- Support for a growing number of Pale Moon exclusive extensions
- Extensive and growing support for HTML5 and CSS3
- Many customization and configuration options
Changes/fixes in Pale Moon 27.4.2:
- Fixed a number of crashes.
- Enabled the opt-in debugging feature to log SSL keys to a file in all builds.
- Added a fix for TLS 1.3 handshakes causing a browser hangup.
- Handshakes should be considerably faster now and no longer stall in the wrong circumstances.
- Updated NSPR to 4.15.
- Updated NSS to 3.31.1.
- Fixed a DoS issue using overly long Username in URL scheme (CVE-2017-7783)
- Fixed an issue where (cross domain) iframes could break scope (CVE-2017-7787)
- Fixed an issue in WindowsDllDetourPatcher (CVE-2017-7804)
- Fixed an issue with elliptic curve addition in mixed Jacobian-affine coordinates (CVE-2017-7781)
- Fixed a UAF in nsImageLoadingContent (CVE-2017-7784)
- Fixed a UAF in WebSockets (CVE-2017-7800)
- Fixed a heap-UAF in RelocateARIAOwnedIfNeeded (CVE-2017-7809) DiD (accessibility is disabled)
Get alerted to all of our Software updates on Twitter at @NeowinSoftware