www.it-connect.fr
Firefox 154 Is Here: WebSockets Under Control, GeForce NOW Support, and 58 Fixes
Firefox 154 has been available since August 18, 2026, and this release brings several noteworthy additions, including one designed to extend local network access protections to WebSocket connections. Let’s not forget support for NVIDIA GeForce NOW on Windows either. Here’s what you need to know.
Since Firefox 150, a website has had to ask for permission before connecting to a device on your local network (NAS, printer, camera) or a service running on the user’s machine. However, one exception remained: WebSocket connections.
That is exactly what the new Firefox 154 release now addresses. A site that tries to open a WebSocket to a local network device now triggers a permission prompt instead of establishing the connection silently. This is a welcome additional security measure. For example, this kind of covert request made by a website can be used to communicate with services exposed on your local network.
Another security-related change involves cookie exceptions. It is now possible to designate sites whose cookies and data should not be cleared when the browser closes, without excluding them from tracking protection. Until now, these two settings were linked.
Another option gives users more control and relates to artificial intelligence integration. The address bar now includes a new quick action called "Manage AI". It opens the "AI Controls" section in settings directly, which appeared with Firefox 148. Mozilla is also gradually rolling out in Smart Window an automatic tab organization feature that can suggest groups and name them.
GeForce NOW arrives in Firefox, but only on Windows
Firefox officially joins the list of browsers supported by NVIDIA GeForce NOW, NVIDIA’s cloud gaming service. That is no small thing: it means users can stream more than 2,000 PC games directly from their browser, with no download and no installation. If you have a GeForce NOW Ultimate subscription, you can get 1440p and up to 120 frames per second.
I want to emphasize that this support is limited to Windows. Mozilla does not mention either macOS or Linux in its announcement. In addition, existing game libraries can be used whether your titles are tied to Steam, the Epic Games Store, GOG, Xbox PC Game Pass, or Ubisoft Connect.
This support is the result of several months of work between Mozilla and NVIDIA. Browser gaming is extremely demanding, after all, between the rendering engine, latency handling, video decoding, and device management... If you want to test it, go to play.geforcenow.com.
58 vulnerabilities fixed, including 20 rated high
This new Firefox release also comes with a security advisory published by Mozilla. It lists 58 vulnerabilities fixed in Firefox 154:
- 20 issues considered high severity, including several privilege escalations and use-after-free bugs in the graphics components, JavaScript engine, and DOM.
- 26 medium-severity issues, affecting cookies, Service Workers, WebRTC, and form autofill in particular.
- 12 low-severity issues, including two clickjacking problems specific to Firefox for Android.
The good news is that there are no critical vulnerabilities. These security fixes are also included in the ESR 153.1, 140.14, and 115.39 releases. At the same time, Mozilla confirms the move to a two-week release cycle starting with Firefox 155, a change we covered last July.
New policy settings for configuring Firefox
In the enterprise changelog, Mozilla mentions three new policy settings. This is useful if you usually manage Firefox through GPOs or via Intune:
- The
DefaultBrowserSettingEnabledpolicy appears to prevent users from changing the default browser. - The
CNSA2KeyAgreementEnabledpolicy enables CNSA 2.0-compliant key exchange, only in Firefox 154. - The
SanitizeOnShutdownpolicy gains anExceptionsoption to designate sites whose data should not be purged on exit, echoing the earlier feature mentioned above.
What do you think of this new release?
