CVE-2024-6293: Use after free in Dawn

Reference Links

• https://chromereleases.googleblog.com/2024/06/stable-channel-update-for-desktop_24.html (Advisory)
• https://issues.chromium.org/issues/345993680
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T6OJ65HWXYSYMH55VDO6N36EOZFUNL4O/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WHV5WTU27YOIBIM2CON42SHWY6J2HPRS/
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-6293 (Advisory)

Parent vulnerabilities

(Appears in the following advisories)

• 4833122486485886930

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2024-6290
• CVE-2024-6291
• CVE-2024-6292

Frequently Asked Questions

• What is the severity of CVE-2024-6293?

  CVE-2024-6293 is classified as a high severity vulnerability due to the potential for exploitation through a use-after-free condition.

• How do I fix CVE-2024-6293?

  To resolve CVE-2024-6293, update your Google Chrome to version 126.0.6478.126 or later and ensure Microsoft Edge is also updated to the latest version.

• Which software is affected by CVE-2024-6293?

  CVE-2024-6293 affects both Google Chrome and Chromium-based Microsoft Edge browsers.

• Is there a workaround for CVE-2024-6293?

  There are no known workarounds for CVE-2024-6293; the best course of action is to apply the recommended updates.

• What types of attacks could exploit CVE-2024-6293?

  Exploitation of CVE-2024-6293 could potentially allow an attacker to execute arbitrary code or crash the browser.