This vulnerability, identified as CVE-2026-24869, involves a use-after-free condition in Firefox's Layout: Scrolling and Overflow component. Use-after-free vulnerabilities occur when a program continues to use memory after it has been freed, potentially leading to arbitrary code execution or crashes. The issue was reported by Hiroyuki Ikezoe and addressed by Mozilla in Firefox 147.0.2. The CVSS v3.1 base score is 8.8, indicating a high severity with network attack vector, low attack complexity, no privileges required, user interaction required, and high impact on confidentiality, integrity, and availability.

Successful exploitation of this vulnerability could lead to significant compromise of the affected system, including unauthorized disclosure of information, modification of data, or denial of service. The high CVSS score reflects the critical nature of the impact on confidentiality, integrity, and availability. However, no active exploitation has been reported in the wild.

Mozilla has released an official fix for this vulnerability in Firefox version 147.0.2. Users and administrators should update to this version or later to remediate the issue. Since this is not a cloud service, remediation depends on applying the update. Patch status is confirmed by the vendor advisory.