Arbitrary JavaScript Execution Vulnerability in Firefox for iOS

CVE-2026-9308

What is CVE-2026-9308?

A security flaw in Firefox for iOS allowed a crafted web page to replace content in its Reader View, using placeholder strings that could be substituted with JSON-LD data. This could lead to arbitrary execution of JavaScript, potentially exposing users to security risks. It highlights the importance of securing web browsers against malicious scripts. The issue was addressed in Firefox for iOS version 151.2, underscoring the need for users to keep their applications updated to safeguard against such vulnerabilities.

References