CVE-2026-79244
published 2026-08-25CVE-2026-79244: Use after free in Animation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…
PriorityP353high8.8CVSS 3.1
AVNACLPRNUIRSUCHIHAH
EPSS
0.41%
33.8th percentile
Use after free in Animation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| chrome | < 152.0.7977.65 | 152.0.7977.65 | |
| chrome | >= 152.0.7977.65 < 152.0.7977.65 | 152.0.7977.65 | |
| chrome_desktop | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Google Chrome up to 151.0.7922.173 Animation use after free
vuldb·2026-08-26
CVE-2026-79244 [CRITICAL] Google Chrome up to 151.0.7922.173 Animation use after free
A vulnerability classified as critical was found in Google Chrome. Affected by this vulnerability is an unknown functionality of the component Animation. Executing a manipulation can lead to use after free.
This vulnerability is handled as CVE-2026-79244. The attack can be executed remotely. There is not any exploit available.
Upgrading the affected component is advised.
GHSA
Use after free in Animation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.
ghsa_unreviewed·2026-08-25
CVE-2026-79244 CWE-416 Use after free in Animation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.
Use after free in Animation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
Chrome
Stable Channel Update for ChromeOS / ChromeOS Flex: CVE-2026-79244
vendor_chrome·2026-09-08·CVSS 8.8
CVE-2026-79244 [HIGH] Stable Channel Update for ChromeOS / ChromeOS Flex: CVE-2026-79244
Stable Channel Update for ChromeOS / ChromeOS Flex
CVE-2026-79244
Chrome
Stable Channel Update for Desktop: CVE-2026-78980
vendor_chrome·2026-08-25
CVE-2026-78980 [LOW] Stable Channel Update for Desktop: CVE-2026-78980
Stable Channel Update for Desktop
CVE-2026-78980: Improper input validation in ReaderMode. Reported by Google on 2026-06-12 [N/A][ 523313378 ] Low CVE-2026-78947: Incomplete cleanup in Chromium
Reported by Microsoft Edge on 2026-06-12 [N/A][ 523572877 ] Low CVE-2026-79244: Use after free in Animation
Severity: low
No detection rules found.
No public exploits indexed.
2026-08-25
Published