CVE-2026-74969 is a use-after-free vulnerability affecting the Layout: Text and Fonts component in Firefox. Use-after-free bugs occur when a program continues to use a pointer after the memory it points to has been freed, potentially leading to memory corruption and security issues. This vulnerability was addressed and fixed in Firefox 154 and Firefox ESR 115.39, 140.14, and 153.1. The CVSS 3.1 base score is 8.8, indicating a high severity with network attack vector, low attack complexity, no privileges required, user interaction required, and impacts to confidentiality, integrity, and availability. The Mozilla advisory confirms the fix and no known active exploitation.

Successful exploitation of this use-after-free vulnerability could allow an attacker to execute arbitrary code or cause a denial of service, impacting confidentiality, integrity, and availability of the affected system. The CVSS score of 8.8 reflects a high impact potential. However, there are no known exploits in the wild at this time.

An official fix is available and has been released in Firefox 154 and Firefox ESR versions 115.39, 140.14, and 153.1. Users and administrators should update to these versions or later to remediate this vulnerability. No additional mitigation actions are indicated by the vendor advisory.