CVE-2026-24869

Use-after-free in the Layout: Scrolling and Overflow component

High · published January 27, 2026

CVSS v3.1
8.8
EPSS
0%
Percentile
18.6
In the wild
Unconfirmed
What it is

⚡ A use-after-free vulnerability in Firefox could let attackers exploit your layout like a mischievous ghost in a hotel, causing spooky surprises that could disrupt your browsing experience! Think of it like a hotel room that someone checks out of, but the cleaning crew forgets to clear out the previous guest's belongings. If the next guest stumbles upon those items, they could cause chaos! This vulnerability could allow an attacker to manipulate a webpage's layout, potentially leading to crashes or unwanted behaviors. While it’s not currently exploited, the risk is high, and if left unpatched, it could be a playground for malevolent actors looking to disturb your online peace.

Put simply

Think of it like a hotel room that someone checks out of, but the cleaning crew forgets to clear out the previous guest's belongings. If the next guest stumbles upon those items, they could cause chaos! The use-after-free flaw in the Layout: Scrolling and Overflow component of Firefox allows for unintended access to freed memory, which can be manipulated by an attacker to execute arbitrary code or cause a crash.

What to do

This vulnerability could allow an attacker to manipulate a webpage's layout, potentially leading to crashes or unwanted behaviors. While it’s not currently exploited, the risk is high, and if left unpatched, it could be a playground for malevolent actors looking to disturb your online peace. To protect yourself, immediately update Firefox to version 147.0.2 or later. Regularly check for updates to ensure that you're always running the latest version, as this is where all the security fixes live! You've got this! Patch up your Firefox and surf without fear! 🛡️

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00273 · 18.6th percentile
Published
2026-01-27T15:58Z
EPSS history
Timeline
  • 27 JAN 15:58Z
    Use-after-free in the Layout: Scrolling and Overflow component
    cvelistv5