Skip to content
OpenAdvisories
High WID-SEC-2026-1763 2 CVEs

Mozilla Firefox für iOS: Mehrere Schwachstellen ermöglichen Ausführen von beliebigem Programmcode

Published Jun 1, 2026 · Updated Jun 1, 2026 · de-DE

Vendor: Mozilla Product: Firefox Platform: iOS

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Mozilla Firefox für iOS ausnutzen, um beliebigen Programmcode auszuführen.

Product

Firefox ist ein Open Source Web Browser.

Vulnerabilities 2

  • Medium 5.4
    CVE-2026-9308

    Arbitrary JavaScript execution in Reader View due to wrong HTML replacement order

    Firefox for iOS Reader View replaced page content in its HTML template before replacing other internal placeholders. A malicious page could include a placeholder string that was later substituted with JSON-LD data, potentially resulting in arbitrary JavaScrip…

    Mozilla Firefox for iOS iOS Browsers
  • Medium 5.4
    CVE-2026-9309

    Arbitrary JavaScript execution in internal pages via Reader View JSON-LD injection

    Firefox for iOS Reader View did not properly escape HTML tags in JSON-LD metadata. A malicious page could inject markup that changed Reader View behavior and leaked sensitive URL parameters. These parameters could then be used to access internal pages, potent…

    Mozilla Firefox for iOS iOS Browsers

Revision history

  1. #1

    Initiale Fassung

References