Firefox for iOS contains a flaw that allows an attacker to elevate permissions within the browser application, enabling execution of code or access to data beyond the intended restrictions. The vulnerability corresponds to the weakness CWE‑269 (Improper Privilege Management) and could compromise device security by letting a malicious user gain higher privileges over the application.

All installations of Mozilla Firefox for iOS running a version earlier than 160.0 are vulnerable; no other vendors or products are affected according to CNA records.

The CVSS score of 8.8 marks the flaw as high severity, and the EPSS score is not available at this time. The vulnerability is not listed in the CISA KEV catalog. The likely attack vector is the delivery of malicious web content or an exploit chain within the browser; exploitation would require crafted content to be executed inside the app. Given the high severity and potential for privilege escalation, the risk is considered high until a patch is applied.