If you’re a Windows user running the Tor Browser, stop what you’re doing and check your version. Tor 14.0.8 is out now, and it’s not your average point release it’s an emergency patch addressing urgent security vulnerabilities in the Firefox engine. This isn’t optional. If you’re on Windows, updating immediately isn’t just a recommendation it’s a necessity.

This emergency release brings over essential security fixes from Firefox 128.8.1 ESR, Mozilla’s extended support version aimed at stability and long-term security. While Tor’s customizations add privacy layers, they still rely on Firefox’s codebase. When Firefox patches a hole, especially one that compromises user security, Tor has to act fast and that’s exactly what this release does.

Beyond the critical fixes, Tor 14.0.8 also backports new UX for its User Survey feature, aiming to streamline how users provide feedback. This could pave the way for more agile responses to user pain points and faster iteration on browser improvements.

But the core of this update is under the hood. The build system has been cleaned up and hardened:

• Obsolete architecture and locale migration support were stripped out legacy update code gone.
• OpenSSL hash file formats were revised to align with upstream changes.
• The anonymous bridge system Snowflake was bumped to version 2.11.0.
• Lyrebird support was upgraded to version 0.6.0, improving pluggable transport capabilities.

And in a nod to security trust chains, a new Firefox/GeckoView signer clairehurst has been added to the list of verified contributors.

The bottom line? If you’re using Tor Browser on Windows, update now. The 14.0.7 version leaves you vulnerable, and threat actors don’t wait for users to catch up.

➪ Download Tor Browser 14.0.8 here
➪ Review the full changelog