{"id":"CVE-2026-121843","published":"2026-11-09T14:17:08.520","lastModified":"2026-11-10T16:27:13.943","description":"Privilege escalation in Firefox for iOS. This vulnerability was fixed in Firefox for iOS 160.0.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwes":[],"vendors":[],"products":[],"references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2083030","tags":[]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-124/","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A privilege escalation flaw in Firefox for iOS allowed an attacker to gain elevated privileges within the app, potentially compromising user data and system integrity. The vulnerability required user interaction and could be triggered remotely via a malicious webpage or link.","exploitability":"Exploitation requires user interaction (e.g., visiting a crafted webpage) and knowledge of the specific trigger mechanism, but low attack complexity makes it feasible for skilled attackers.","blast_radius":"Successful exploitation could lead to full compromise of the Firefox for iOS app’s sandbox, enabling theft of browsing data, session tokens, or local file access, and potentially facilitating further lateral movement on the device.","remediation":"Upgrade to Firefox for iOS version 160.0 or later, which contains the fix for this privilege escalation vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["privilege-escalation","mobile","ios","browser"],"model":"garnet-coder","analyzedAt":"2026-11-10T09:47:22.408Z"}}