CVE-2026-79209
published 2026-08-25CVE-2026-79209: Type confusion in Animation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…
PriorityP353high8.8CVSS 3.1
AVNACLPRNUIRSUCHIHAH
EPSS
0.45%
37.4th percentile
Type confusion in Animation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| chrome | < 152.0.7977.65 | 152.0.7977.65 | |
| chrome | >= 152.0.7977.65 < 152.0.7977.65 | 152.0.7977.65 | |
| chrome_desktop | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Chrome
Stable Channel Update for Desktop: CVE-2026-79209
vendor_chrome·2026-08-25
CVE-2026-79209 [MEDIUM] Stable Channel Update for Desktop: CVE-2026-79209
Stable Channel Update for Desktop
CVE-2026-79209: Type confusion in Animation. Reported by ochko on 2026-03-22 [$2,000][ 40057398 ] Medium CVE-2026-79030: Observable discrepancy in Autofill
Reported by Young Min Kim (@ylemkimon), CompSec Lab at Seoul National University on 2021-09-25 [$1,000][ 536913431 ] Medium CVE-2026-79216: Buffer overflow in Blink
Severity: medium
VulDB
Google Chrome up to 151.0.7922.173 Animation type confusion
vuldb·2026-08-26
CVE-2026-79209 [CRITICAL] Google Chrome up to 151.0.7922.173 Animation type confusion
A vulnerability labeled as critical has been found in Google Chrome. Affected by this issue is some unknown functionality of the component Animation. Such manipulation leads to type confusion.
This vulnerability is traded as CVE-2026-79209. The attack may be launched remotely. There is no exploit available.
The affected component should be upgraded.
GHSA
Type confusion in Animation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page.
ghsa_unreviewed·2026-08-25
CVE-2026-79209 CWE-843 Type confusion in Animation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page.
Type confusion in Animation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
No detection rules found.
No public exploits indexed.
2026-08-25
Published