CVE-2024-3515: Use after free in Dawn

Reference Links

• https://chromereleases.googleblog.com/2024/04/stable-channel-update-for-desktop_10.html (Advisory)
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-3515 (Advisory)
• https://issues.chromium.org/issues/331123811
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NDHNEFD76ORM7WBWAEZT6HSYDMZVIED4/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5EW66LXDACTB5FCHLUPZOGD2KA2J62Q2/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EVEJEW7UCSUSK2J2FYQRZZPI74P2D3JP/

Parent vulnerabilities

(Appears in the following advisories)

• 7320210136971684563

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2024-3157
• CVE-2024-3516

Frequently Asked Questions

• What is the severity of CVE-2024-3515?

  CVE-2024-3515 is classified as a high severity vulnerability due to a use-after-free condition in Google Chrome.

• How do I fix CVE-2024-3515?

  To fix CVE-2024-3515, update Google Chrome to version 123.0.6312.122 or later.

• Which versions of Google Chrome are affected by CVE-2024-3515?

  CVE-2024-3515 affects versions of Google Chrome prior to 123.0.6312.122.

• Is Microsoft Edge (Chromium-based) affected by CVE-2024-3515?

  Yes, Microsoft Edge (Chromium-based) is affected by CVE-2024-3515 as it inherits the Chromium engine.

• What impact does CVE-2024-3515 have on users?

  CVE-2024-3515 can allow an attacker to execute arbitrary code on a victim's system, potentially compromising user data and system integrity.