CVE-2026-24869 is a use-after-free vulnerability (CWE-416) affecting the Layout: Scrolling and Overflow component in Mozilla Firefox. This type of vulnerability can lead to memory corruption, potentially allowing attackers to execute arbitrary code or cause denial of service. The issue was addressed and fixed in Firefox version 147.0.2. The CVSS v3.1 base score is 8.8, indicating a high severity with network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, and high impact on confidentiality, integrity, and availability. Vendor advisories from Mozilla and Red Hat confirm the fix and provide references to the underlying bugs.

The vulnerability can lead to high impact on confidentiality, integrity, and availability of the affected system due to use-after-free memory corruption. Exploitation could allow remote attackers to execute arbitrary code or cause a denial of service. No known exploits in the wild have been reported at the time of publication.

A fix is available and has been released in Mozilla Firefox version 147.0.2. Users and administrators should update to Firefox 147.0.2 or later to remediate this vulnerability. Vendor advisories from Mozilla and Red Hat provide official guidance and confirm the availability of the patch.