CVE-2026-79244: Use after free in Google Chrome

This vulnerability involves a use-after-free condition in the Animation subsystem of Google Chrome before version 152.0.7977.65. Exploitation requires user interaction (UI:R) and can be triggered remotely via a maliciously crafted HTML page, enabling arbitrary code execution inside the sandboxed environment. The CVSS vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, and high impact on confidentiality, integrity, and availability. The vulnerability is publicly disclosed with no known exploits in the wild at this time. A vendor advisory is available but does not explicitly state the remediation level.

Successful exploitation can lead to arbitrary code execution within the sandboxed environment of Google Chrome, potentially compromising confidentiality, integrity, and availability of the affected system. The attack requires user interaction and can be performed remotely over the network. There are no known active exploits in the wild currently.

The vendor advisory link provided should be consulted for the latest remediation guidance. Since the vulnerability affects versions prior to 152.0.7977.65, updating to version 152.0.7977.65 or later is recommended to mitigate this issue. Patch status is not explicitly confirmed in the advisory metadata; therefore, verify the vendor advisory for official fix confirmation.