Stats
- First seen
- November 2023
- Last seen
- September 2026
Description
Detects web content that exploits CVE-2022-0609, a use-after-free in Chrome's animation timeline implementation that can allow remote code execution. The rule matches the DocumentTimeline and animation callbacks from public exploits, and the Google Threat Analysis Group documented use of this vulnerability in targeted attacks attributed to North Korean actors.