# Pale Moon 34.3.2_Release — Pale Moon 34.3.2

- Product: Pale Moon (https://whatsnew.fyi/product/pale-moon)
- Vendor: Moonchild Productions
- Date: 2026-08-04
- Version: 34.3.2_Release
- Original notes: https://repo.palemoon.org/MoonchildProductions/Pale-Moon/releases/tag/34.3.2_Release
- Permalink: https://whatsnew.fyi/product/pale-moon/releases/34.3.2-release
- Labels: Platforms: Windows, Linux

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

- **added** — Implement the URL.Parse() convenience function
- **security** — Add multiple bounds checks on internal browser functions to avoid potential out-of-bounds accesses, underflows and overflows
- **fixed** — Fix several issues with loading and parsing content-supplied fonts
- **security** — Set a bottom limit on the frequency for audio samples to avoid potential bugs surrounding audio loading, processing and playback, rejecting audio formats with a sample rate below 8kHz
- **fixed** — Fix a potential issue in CSS rounded corners with dotted styling
- **changed** — Image elements in forms are no longer associated if they are not in the same subtree
- **security** — Make image animation checks more strict to avoid potential issues if decoding would be slow
- **security** — Make video region checks more strict to avoid issues with malformed video files
- **changed** — Update NSS to 3.90.13.0 (UXP) addressing all applicable security issues from NSS upstream
- **security** — Address CVE-2026-16353, CVE-2026-16408, CVE-2026-16389 and other security issues

This is a security and minor web compat release.

**Changes/fixes:**

- Implemented the URL.Parse() convenience function.
- Added multiple bounds checks on internal browser functions to avoid potential out-of-bounds accesses, underflows and overflows. (DiD)
- Fixed several issues with loading and parsing content-supplied fonts.
- Set a bottom limit on the frequency for audio samples to avoid a whole class of potential bugs surrounding audio loading, processing and playback.
  Audio formats with a sample rate below 8kHz (the commonly accepted lowest sample rate of "telephone"/"walkie-talkie" quality) are now rejected.
- Fixed a potential issue in CSS rounded corners with dotted styling.
- Image elements in forms are no longer associated if they are not in the same subtree.
- Made image animation checks more strict to avoid potential issues if decoding would be slow.
- Video region checks are now more strict to avoid issues with malformed video files.
- Updated NSS to 3.90.13.0 (UXP) addressing all applicable security issues from NSS upstream.
- Another large security audit of over 200 sec bugs in Mozilla land has been performed, with the vast majority not being applicable to our code base (primarily e10s/IPC bugs).
- Security issues addressed: CVE-2026-16353, CVE-2026-16408, CVE-2026-16389 and many others that do not have a CVE designation.