Class familyGoogle · Chromium Animation
Google Chrome use-after-free flaws, 2019–2026
75 Chromium Animation CVEs with CWE-416 weaknesses, 27 Jun 2019 to 30 Oct 2026. 15 are in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it..
CVEs by year
Published each year. Select a CVE to open it.Grouped by product and weakness type (CWE); not proven to share a root cause.
2 2019’19
2020’20
8 2021’21
3 2022’22
2023’23
4 2024’24
2025’25
58 2026’26
In CISA KEVNot in KEV
20192 CVEs, 2 in KEV
20218 CVEs, 8 in KEV
20223 CVEs, 3 in KEV
20244 CVEs, 1 in KEV
202658 CVEs, 1 in KEV
- CVE-2026-2441
- CVE-2026-5273
- CVE-2026-5861
- CVE-2026-5866
- CVE-2026-6300
- CVE-2026-7335
- CVE-2026-7938
- CVE-2026-8544
- CVE-2026-8549
- CVE-2026-9947
- CVE-2026-9992
- CVE-2026-10959
- CVE-2026-11649
- CVE-2026-11650
- CVE-2026-11651
- CVE-2026-15118
- CVE-2026-17658
- CVE-2026-17665
- CVE-2026-17719
- CVE-2026-19151
- CVE-2026-19556
- CVE-2026-19559
- CVE-2026-78899
- CVE-2026-79195
- CVE-2026-79198
- CVE-2026-87460
- CVE-2026-87536
- CVE-2026-87542
- CVE-2026-87587
- CVE-2026-91737
- CVE-2026-91745
- CVE-2026-95282
- CVE-2026-106190
- CVE-2026-106193
- CVE-2026-106257
- CVE-2026-106269
- CVE-2026-106318
- CVE-2026-106349
- CVE-2026-106383
- CVE-2026-106411
- CVE-2026-106421
- CVE-2026-106423
- CVE-2026-110139
- CVE-2026-110147
- CVE-2026-110153
- CVE-2026-110167
- CVE-2026-110168
- CVE-2026-110169
- CVE-2026-110171
- CVE-2026-110172
- CVE-2026-110919
- CVE-2026-110921
- CVE-2026-112993
- CVE-2026-113044
- CVE-2026-113119
- CVE-2026-113203
- CVE-2026-118347
- CVE-2026-76031
CVEs in this family
Table view of the years above| CVE | Published | Title | Linked from | Priority |
|---|---|---|---|---|
| CVE-2019-5786KEV | 27 Jun 2019 | Google Chrome Blink Use-After-Free Vulnerability | Grouped by weakness | 67.4 |
| CVE-2019-13720KEV | 25 Nov 2019 | Google Chrome WebAudio Use-After-Free Vulnerability | Grouped by weakness | 72.8 |
| CVE-2020-16017KEV | 8 Jan 2021 | Google Chrome Use-After-Free Vulnerability | Grouped by weakness | 61.9 |
| CVE-2020-6572KEV | 14 Jan 2021 | Google Chrome Media Use-After-Free Vulnerability | Grouped by weakness | 63.3 |
| CVE-2021-21193KEV | 16 Mar 2021 | Google Chromium Blink Use-After-Free Vulnerability | Grouped by weakness | 68.3 |
| CVE-2021-21206KEV | 26 Apr 2021 | Google Chromium Blink Use-After-Free Vulnerability | Grouped by weakness | 63.2 |
| CVE-2021-30554KEV | 2 Jul 2021 | Google Chromium WebGL Use-After-Free Vulnerability | Grouped by weakness | 63.0 |
| CVE-2021-30633KEV | 8 Oct 2021 | Google Chromium Indexed DB API Use-After-Free Vulnerability | Grouped by weakness | 64.4 |
| CVE-2021-37973KEV | 8 Oct 2021 | Google Chromium Portals Use-After-Free Vulnerability | Grouped by weakness | 63.9 |
| CVE-2021-37975KEV | 8 Oct 2021 | Google Chromium V8 Use-After-Free Vulnerability | Grouped by weakness | 68.8 |
| CVE-2021-4102KEV | 11 Feb 2022 | Google Chromium V8 Use-After-Free Vulnerability | Grouped by weakness | 63.1 |
| CVE-2022-0609KEV | 5 Apr 2022 | Google Chromium Animation Use-After-Free Vulnerability | Grouped by weakness | 73.7 |
| CVE-2022-3038KEV | 26 Sep 2022 | Google Chromium Network Service Use-After-Free Vulnerability | Grouped by weakness | 68.7 |
| CVE-2024-0224 | 4 Jan 2024 | Use after free in WebAudio in Google Chrome prior to 120.0.6099.199 allowed a remote attacker to potentially exploit… | Grouped by weakness | 18.8 |
| CVE-2024-4671KEV | 14 May 2024 | Google Chromium Visuals Use-After-Free Vulnerability | Grouped by weakness | 63.7 |
| CVE-2024-7536 | 6 Aug 2024 | Use after free in WebAudio in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially exploit… | Grouped by weakness | 16.6 |
| CVE-2024-8362 | 3 Sep 2024 | Use after free in WebAudio in Google Chrome prior to 128.0.6613.119 allowed a remote attacker to potentially exploit… | Grouped by weakness | 15.6 |
| CVE-2026-2441KEV | 13 Feb 2026 | Google Chromium CSS Use-After-Free Vulnerability | Grouped by weakness | 74.0 |
| CVE-2026-5273 | 1 Apr 2026 | Use after free in CSS in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code… | Grouped by weakness | 10.3 |
| CVE-2026-5861 | 8 Apr 2026 | Use after free in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code… | Grouped by weakness | 10.8 |
| CVE-2026-5866 | 8 Apr 2026 | Use after free in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code… | Grouped by weakness | 10.8 |
| CVE-2026-6300 | 15 Apr 2026 | Use after free in CSS in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code… | Grouped by weakness | 16.7 |
| CVE-2026-7335 | 28 Apr 2026 | Use after free in media in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code… | Grouped by weakness | 12.6 |
| CVE-2026-7938 | 6 May 2026 | Use after free in CSS in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code… | Grouped by weakness | 9.9 |
| CVE-2026-8544 | 14 May 2026 | Use after free in Media in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code… | Grouped by weakness | 10.3 |
| CVE-2026-8549 | 14 May 2026 | Use after free in Media in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code… | Grouped by weakness | 10.3 |
| CVE-2026-9947 | 28 May 2026 | Use after free in XML in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code… | Grouped by weakness | 10.8 |
| CVE-2026-9992 | 28 May 2026 | Use after free in Network in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code… | Grouped by weakness | 9.0 |
| CVE-2026-10959 | 4 Jun 2026 | Use after free in Input in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to execute… | Grouped by weakness | 12.1 |
| CVE-2026-11649 | 8 Jun 2026 | Use after free in V8 in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code… | Grouped by weakness | 11.0 |
| CVE-2026-11650 | 8 Jun 2026 | Use after free in V8 in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code… | Grouped by weakness | 11.0 |
| CVE-2026-11651 | 8 Jun 2026 | Use after free in Network in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code… | Grouped by weakness | 12.1 |
| CVE-2026-15118 | 8 Jul 2026 | Use after free in Input in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execute arbitrary code… | Grouped by weakness | 13.3 |
| CVE-2026-17658 | 30 Jul 2026 | Use after free in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code… | Grouped by weakness | 13.3 |
| CVE-2026-17665 | 30 Jul 2026 | Use after free in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code… | Grouped by weakness | 13.3 |
| CVE-2026-17719 | 30 Jul 2026 | Use after free in Input in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code… | Grouped by weakness | 13.3 |
| CVE-2026-19151 | 6 Aug 2026 | Use after free in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code… | Grouped by weakness | 13.3 |
| CVE-2026-19556 | 11 Aug 2026 | Use after free in V8 in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code… | Grouped by weakness | 13.3 |
| CVE-2026-19559 | 11 Aug 2026 | Use after free in HTML in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code… | Grouped by weakness | 13.3 |
| CVE-2026-78899 | 25 Aug 2026 | Use after free in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code… | Grouped by weakness | 13.3 |
| CVE-2026-79195 | 25 Aug 2026 | Use after free in Script in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code… | Grouped by weakness | 13.3 |
| CVE-2026-79198 | 25 Aug 2026 | Use after free in Platform in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code… | Grouped by weakness | 13.3 |
| CVE-2026-87460 | 9 Sep 2026 | Use after free in Platform in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code… | Grouped by weakness | 13.3 |
| CVE-2026-87536 | 9 Sep 2026 | Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code… | Grouped by weakness | 13.3 |
| CVE-2026-87542 | 9 Sep 2026 | Use after free in Input in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code… | Grouped by weakness | 13.3 |
| CVE-2026-87587 | 9 Sep 2026 | Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code… | Grouped by weakness | 13.3 |
| CVE-2026-91737 | 15 Sep 2026 | Use after free in PDF in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code… | Grouped by weakness | 16.6 |
| CVE-2026-91745 | 15 Sep 2026 | Use after free in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code… | Grouped by weakness | 12.1 |
| CVE-2026-95282 | 29 Sep 2026 | Use after free in Platform in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code… | Grouped by weakness | 12.0 |
| CVE-2026-106190 | 6 Oct 2026 | Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code… | Grouped by weakness | 12.3 |
| CVE-2026-106193 | 6 Oct 2026 | Use after free in Parser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code… | Grouped by weakness | 13.0 |
| CVE-2026-106257 | 6 Oct 2026 | Use after free in HTML in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code… | Grouped by weakness | 10.8 |
| CVE-2026-106269 | 6 Oct 2026 | Use after free in CSS in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code… | Grouped by weakness | 10.9 |
| CVE-2026-106318 | 6 Oct 2026 | Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code… | Grouped by weakness | 10.8 |
| CVE-2026-106349 | 6 Oct 2026 | Use after free in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code… | Grouped by weakness | 11.4 |
| CVE-2026-106383 | 6 Oct 2026 | Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code… | Grouped by weakness | 11.6 |
| CVE-2026-106411 | 6 Oct 2026 | Use after free in Parser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code… | Grouped by weakness | 10.9 |
| CVE-2026-106421 | 6 Oct 2026 | Use after free in PDF in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code… | Grouped by weakness | 10.9 |
| CVE-2026-106423 | 6 Oct 2026 | Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code… | Grouped by weakness | 10.9 |
| CVE-2026-110139 | 13 Oct 2026 | Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code… | Grouped by weakness | 10.5 |
| CVE-2026-110147 | 13 Oct 2026 | Use after free in PDF in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code… | Grouped by weakness | 10.9 |
| CVE-2026-110153 | 13 Oct 2026 | Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code… | Grouped by weakness | 10.5 |
| CVE-2026-110167 | 13 Oct 2026 | Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code… | Grouped by weakness | 9.8 |
| CVE-2026-110168 | 13 Oct 2026 | Use after free in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code… | Grouped by weakness | 9.8 |
| CVE-2026-110169 | 13 Oct 2026 | Use after free in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code… | Grouped by weakness | 9.8 |
| CVE-2026-110171 | 13 Oct 2026 | Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code… | Grouped by weakness | 9.8 |
| CVE-2026-110172 | 13 Oct 2026 | Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code… | Grouped by weakness | 9.8 |
| CVE-2026-110919 | 15 Oct 2026 | Use after free in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code… | Grouped by weakness | 9.5 |
| CVE-2026-110921 | 15 Oct 2026 | Use after free in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code… | Grouped by weakness | 9.5 |
| CVE-2026-112993 | 20 Oct 2026 | Use after free in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code… | Grouped by weakness | 13.4 |
| CVE-2026-113044 | 20 Oct 2026 | Use after free in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code… | Grouped by weakness | 13.4 |
| CVE-2026-113119 | 20 Oct 2026 | Use after free in Network in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute… | Grouped by weakness | 13.4 |
| CVE-2026-113203 | 20 Oct 2026 | Use after free in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute… | Grouped by weakness | 13.1 |
| CVE-2026-118347 | 27 Oct 2026 | Use after free in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary… | Grouped by weakness | 9.8 |
| CVE-2026-76031 | 30 Oct 2026 | Use after free in Input in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code… | Grouped by weakness | 9.3 |