diff --git a/CHANGELOG.md b/CHANGELOG.md
index 1cb23d048f..f30ff21ebd 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -13,6 +13,9 @@ This project adheres to [Semantic Versioning](http://semver.org/).
 - fixed issues with ini section editor in dark mode
 - fixed deleting sandbox content [#4407](https://github.com/sandboxie-plus/Sandboxie/pull/4407) (thanks bot-1450)
 - fixed run unsandboxed no longer working from box picker window [#4403](https://github.com/sandboxie-plus/Sandboxie/issues/4403)
+- fixed Firefox tab crashes when running with `ProtectHostImages=y` enabled [#4394](https://github.com/sandboxie-plus/Sandboxie/issues/4394)
+  - Only default installation locations are considered; Firefox-based browsers installed outside of these locations may still crash.
+  - To prevent this, manually add `DontCopy=<CustomInstallPath>` for custom installation paths to your configuration
 
 
 
diff --git a/Sandboxie/install/Templates.ini b/Sandboxie/install/Templates.ini
index 6f9fd297b3..53fea2be8a 100644
--- a/Sandboxie/install/Templates.ini
+++ b/Sandboxie/install/Templates.ini
@@ -3877,6 +3877,13 @@ DontCopy=*.wav
 DontCopy=*.webm
 DontCopy=*.wma
 DontCopy=*.wmv
+# For ProtectHostImages=y (issue 4394)
+DontCopy=%ProgramFiles%*\Mozilla Firefox\*
+DontCopy=%ProgramFiles%*\Firefox Nightly\*
+DontCopy=%ProgramFiles%*\Firefox Developer Edition\*
+DontCopy=%ProgramFiles%*\LibreWolf\*
+DontCopy=%ProgramFiles%*\Waterfox\*
+DontCopy=%ProgramFiles%*\Ablaze Floorp\*
 
 [Template_RpcPortBindings]
 Tmpl.Title=#4296