The Reader View component of Firefox for iOS contains a flaw that allows an attacker to gain higher privileges on the host device than the application is permitted to have. If an adversary can trigger the vulnerable code while the browser is displaying a web page in Reader View, they could execute privileged operations or access protected resources. The weakness is a form of improper authorization that can lead to privilege escalation.

Mozilla Firefox for iOS, versions earlier than 160.0. The fix is included in build 160.0, so any installation of a prior build on a supported iOS device is vulnerable.

The vulnerability carries a high severity with a CVSS score of 8.8. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog, indicating no confirmed widespread exploitation. The likely attack vector requires malicious or crafted web content displayed in the Reader View and presumably user interaction to trigger the flaw.