Skip to content
OpenAdvisories
High · 8.8 CVE-2026-24869 EUVD-2026-4814GHSA-5hpc-pqrr-8j6m

Use-after-free in the Layout: Scrolling and Overflow component

Published Jan 27, 2026 · Updated Jul 15, 2026 · Assigned by mozilla

Description

Use-after-free in the Layout: Scrolling and Overflow component. This vulnerability was fixed in Firefox 147.0.2.

Affected products

VendorProductAffectedFixed
Mozilla Firefox — 147.0.2

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
openSUSE Tumbleweed MozillaFirefox 147.0.2-1.1 openSUSE-SU-2026:10120-1
openSUSE Tumbleweed firefox-esr 153.0-1.1 openSUSE-SU-2026:11373-1

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling firefox 147.0.2-r0 —

Advisories 3

References