{"id":"CVE-2026-121842","kind":"vulnerability","aliases":["CVE-2026-121842"],"related":[],"title":"Firefox for iOS: Reader View flaw allows privilege escalation","description":"Privilege escalation in the Reader View component in Firefox for iOS. This vulnerability was fixed in Firefox for iOS 160.0.","summary":"Reader View in Firefox for iOS contains a privilege escalation flaw. The sources do not describe the exact attack path beyond gaining higher privileges inside the app.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["firefox","ios","other"],"not_affected_if":["firefox-version-160-or-later"],"how_to_check":"- Check the installed Firefox for iOS version in Settings or the App Store; the sources name version `160.0` as the fixed release.","fix":"- Firefox for iOS: move to `160.0` or later.","status":"open","published_at":"2026-11-09T14:17:08+00:00","first_seen_at":"2026-11-09T14:26:59+00:00","triaged_at":"2026-11-09T14:27:49+00:00","updated_at":"2026-11-09T14:27:49+00:00","category":"other","confidence":0.5,"triage":{"at":"2026-11-09T14:27:49Z","model":"claude-haiku-5-5","output":{"fix":"- Firefox for iOS: move to `160.0` or later.","reach":"unknown","title":"Firefox for iOS: Reader View flaw allows privilege escalation","impact":"medium","summary":"Reader View in Firefox for iOS contains a privilege escalation flaw. The sources do not describe the exact attack path beyond gaining higher privileges inside the app.","audience":"everyone","category":"other","nicknames":[],"who_cares":["firefox","ios"],"confidence":0.5,"fix_status":"available","needs_auth":"unknown","worst_case":"unknown; sources only say privilege escalation","analyst_note":"Sources give only a one-line description; check the Mozilla security advisory for attack vector, prerequisites and severity.","how_to_check":"- Check the installed Firefox for iOS version in Settings or the App Store; the sources name version `160.0` as the fixed release.","plain_action":"Update Firefox on your iPhone or iPad to version 160.0 or later through the App Store.","product_name":"","needs_analyst":true,"not_affected_if":["firefox-version-160-or-later"],"who_is_affected":"Users of Firefox for iOS whose app predates version 160.0 are affected. The sources do not say whether any specific Reader View setting or content is required to trigger it.","user_interaction":"unknown","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000689,"input_tokens":4479,"output_tokens":482,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-121842':12A,15A '-2026':11A,14A '160.0':64C 'allow':7A 'app':44B 'attack':36B 'beyond':38B 'compon':51C 'contain':24B 'cve':10A,13A 'describ':33B 'escal':9A,27B,46C 'exact':35B 'firefox':1A,16B,21B,53C,61C 'fix':59C 'flaw':6A,28B 'gain':39B 'higher':40B 'insid':42B 'io':3A,17B,23B,55C,63C 'path':37B 'privileg':8A,26B,41B,45C 'reader':4A,18B,49C 'sourc':30B 'view':5A,19B,50C 'vulner':57C","nicknames":[],"mitigations":[],"who_affected":"Users of Firefox for iOS whose app predates version 160.0 are affected. The sources do not say whether any specific Reader View setting or content is required to trigger it.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"everyone","plain_action":"Update Firefox on your iPhone or iPad to version 160.0 or later through the App Store.","pkeys":[],"ptokens":[],"labels":["firefox","ios","other","unknown"],"campaign_type":null,"search_a":"'-121842':12A,15A '-2026':11A,14A 'allow':7A 'cve':10A,13A 'escal':9A 'firefox':1A 'flaw':6A 'io':3A 'privileg':8A 'reader':4A 'view':5A","search_b":"'app':44B 'attack':36B 'beyond':38B 'contain':24B 'describ':33B 'escal':27B 'exact':35B 'firefox':16B,21B 'flaw':28B 'gain':39B 'higher':40B 'insid':42B 'io':17B,23B 'path':37B 'privileg':26B,41B 'reader':18B 'sourc':30B 'view':19B","search_c":"'160.0':64C 'compon':51C 'escal':46C 'firefox':53C,61C 'fix':59C 'io':55C,63C 'privileg':45C 'reader':49C 'view':50C 'vulner':57C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-09T14:17:08+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-121842","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-121842","severity":null,"published_at":"2026-11-09T14:17:08+00:00","modified_at":"2026-11-09T14:17:08+00:00","first_seen_at":"2026-11-09T14:26:59+00:00","fetched_at":"2026-11-09T14:26:59+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}