Microsoft .NET Framework Assistant has been unblocked as it was identified as not being a vector. WPF is still blocked, though if you are fully patched (it's listed as a patch for IE mind ), then you aren't vulnerable (to this vector anyway), but without over-riding the blocklist you'll not be able to enable it. Mozilla are working with MS to get a better resolution. (Note that WPF is a plugin and not an extension and is listed in the appropriate tab of the add-on manager).