CVE-2026-121843

Summary

A privilege escalation flaw in Firefox for iOS allowed an attacker to gain elevated privileges within the app, potentially compromising user data and system integrity. The vulnerability required user interaction and could be triggered remotely via a malicious webpage or link.

Exploitability

Exploitation requires user interaction (e.g., visiting a crafted webpage) and knowledge of the specific trigger mechanism, but low attack complexity makes it feasible for skilled attackers.

Blast radius

Successful exploitation could lead to full compromise of the Firefox for iOS app’s sandbox, enabling theft of browsing data, session tokens, or local file access, and potentially facilitating further lateral movement on the device.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Firefox for iOS version 160.0 or later, which contains the fix for this privilege escalation vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.