{"id":"CVE-2026-9308","aliases":["EUVD-2026-33629","GHSA-h55j-6jm9-f8vp"],"status":"published","title":"Arbitrary JavaScript execution in Reader View due to wrong HTML replacement order","description":"Firefox for iOS Reader View replaced page content in its HTML template before replacing other internal placeholders. A malicious page could include a placeholder string that was later substituted with JSON-LD data, potentially resulting in arbitrary JavaScript execution. This vulnerability was fixed in Firefox for iOS 151.2.","severity":{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-09","score":0.00157,"percentile":0.04913,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-79"],"published":"2026-06-01T11:24:09Z","modified":"2026-07-22T07:10:00Z","products":[{"vendor":"mozilla","product":"firefox"},{"vendor":"mozilla","product":"firefox for ios"}],"references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2039422","tags":["Permissions Required"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-53/","tags":["Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-9308"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-53"},{"url":"https://github.com/advisories/GHSA-h55j-6jm9-f8vp"}],"sources":{"cve":[{"id":"CVE-2026-9308","title":"Arbitrary JavaScript execution in Reader View due to wrong HTML replacement order","description":"Firefox for iOS Reader View replaced page content in its HTML template before replacing other internal placeholders. A malicious page could include a placeholder string that was later substituted with JSON-LD data, potentially resulting in arbitrary JavaScript execution. This vulnerability was fixed in Firefox for iOS 151.2.","status":"published","published":"2026-06-01T11:24:09.708Z","modified":"2026-06-01T13:52:59.059Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T13:42:26.790871Z"}],"euvd":[{"id":"EUVD-2026-33629","description":"Firefox for iOS Reader View replaced page content in its HTML template before replacing other internal placeholders. A malicious page could include a placeholder string that was later substituted with JSON-LD data, potentially resulting in arbitrary JavaScript execution. This vulnerability was fixed in Firefox for iOS 151.2.","status":"published","published":"2026-06-01T11:24:09Z","modified":"2026-06-01T13:52:59Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T18:20:58.729223Z"}],"ghsa":[{"id":"GHSA-h55j-6jm9-f8vp","title":"Firefox for iOS Reader View replaced page content in its HTML template before replacing other...","description":"Firefox for iOS Reader View replaced page content in its HTML template before replacing other internal placeholders. A malicious page could include a placeholder string that was later substituted with JSON-LD data, potentially resulting in arbitrary JavaScript execution. This vulnerability was fixed in Firefox for iOS 151.2.","status":"published","published":"2026-06-01T15:30:40Z","modified":"2026-06-01T15:30:49Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T15:08:26.25145Z"}],"nvd":[{"id":"CVE-2026-9308","description":"Firefox for iOS Reader View replaced page content in its HTML template before replacing other internal placeholders. A malicious page could include a placeholder string that was later substituted with JSON-LD data, potentially resulting in arbitrary JavaScript execution. This vulnerability was fixed in Firefox for iOS 151.2.","status":"published","published":"2026-06-01T13:16:33.523Z","modified":"2026-07-22T07:10:00.107Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:12:21.635958Z"}]}}