{"id":"CVE-2026-121843","kind":"vulnerability","aliases":["CVE-2026-121843"],"related":[],"title":"Firefox for iOS: a privilege escalation flaw, fixed in version 160.0","description":"Privilege escalation in Firefox for iOS. This vulnerability was fixed in Firefox for iOS 160.0.","summary":"Firefox for iOS has a privilege escalation flaw that the sources do not describe in detail. The sources say it was fixed in Firefox for iOS 160.0, so an attacker may be able to gain more access than they should on an unpatched device.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["firefox","ios","other"],"not_affected_if":[],"how_to_check":"- Open Firefox on the iPhone or iPad and check the app version in the App Store updates list or the app's About screen","fix":"- Firefox for iOS: `160.0`","status":"open","published_at":"2026-11-09T14:17:08+00:00","first_seen_at":"2026-11-09T14:26:59+00:00","triaged_at":"2026-11-09T14:27:49+00:00","updated_at":"2026-11-09T14:27:49+00:00","category":"other","confidence":0.5,"triage":{"at":"2026-11-09T14:27:49Z","model":"claude-haiku-5-5","output":{"fix":"- Firefox for iOS: `160.0`","reach":"unknown","title":"Firefox for iOS: a privilege escalation flaw, fixed in version 160.0","impact":"medium","summary":"Firefox for iOS has a privilege escalation flaw that the sources do not describe in detail. The sources say it was fixed in Firefox for iOS 160.0, so an attacker may be able to gain more access than they should on an unpatched device.","audience":"everyone","category":"other","nicknames":[],"who_cares":["firefox","ios"],"confidence":0.5,"fix_status":"available","needs_auth":"unknown","worst_case":"attacker gains higher privileges than intended within the app","analyst_note":"","how_to_check":"- Open Firefox on the iPhone or iPad and check the app version in the App Store updates list or the app's About screen\n- unknown","plain_action":"Update Firefox on your iPhone or iPad to version 160.0 or later through the App Store.","product_name":"","needs_analyst":false,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"unknown","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000651,"input_tokens":4465,"output_tokens":409,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-121843':14A,17A '-2026':13A,16A '160.0':11A,46B,78C 'abl':52B 'access':56B 'attack':49B 'cve':12A,15A 'describ':33B 'detail':35B 'devic':63B 'escal':6A,26B,65C 'firefox':1A,18B,20B,43B,67C,75C 'fix':8A,41B,73C 'flaw':7A,27B 'gain':54B 'io':3A,19B,22B,45B,69C,77C 'may':50B 'privileg':5A,25B,64C 'say':38B 'sourc':30B,37B 'unpatch':62B 'version':10A 'vulner':71C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"everyone","plain_action":"Update Firefox on your iPhone or iPad to version 160.0 or later through the App Store.","pkeys":[],"ptokens":[],"labels":["firefox","ios","other","unknown"],"campaign_type":null,"search_a":"'-121843':14A,17A '-2026':13A,16A '160.0':11A 'cve':12A,15A 'escal':6A 'firefox':1A 'fix':8A 'flaw':7A 'io':3A 'privileg':5A 'version':10A","search_b":"'160.0':46B 'abl':52B 'access':56B 'attack':49B 'describ':33B 'detail':35B 'devic':63B 'escal':26B 'firefox':18B,20B,43B 'fix':41B 'flaw':27B 'gain':54B 'io':19B,22B,45B 'may':50B 'privileg':25B 'say':38B 'sourc':30B,37B 'unpatch':62B","search_c":"'160.0':78C 'escal':65C 'firefox':67C,75C 'fix':73C 'io':69C,77C 'privileg':64C 'vulner':71C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-09T14:17:08+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-121843","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-121843","severity":null,"published_at":"2026-11-09T14:17:08+00:00","modified_at":"2026-11-09T14:17:08+00:00","first_seen_at":"2026-11-09T14:26:59+00:00","fetched_at":"2026-11-09T14:26:59+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}