CVE-2026-93374
Description
A flaw was found in Chromium's Dawn component. A remote attacker can exploit a use-after-free issue—a condition where memory is referenced after being released—by convincing a user to open a specially crafted HTML page. Successful exploitation allows the attacker to execute arbitrary code outside of the browser sandbox.
Statement
A use-after-free flaw was found in the Dawn graphics component of Chromium. This flaw is rated Important for Red Hat's offerings: only the community-maintained Fedora and EPEL chromium streams are in scope, and the fix for those streams is delegated to the community maintainers; no Red Hat Enterprise Linux products are affected. A remote attacker could exploit this use-after-free by convincing a user to open a specially crafted HTML page, triggering memory corruption in Dawn that could allow arbitrary code execution outside the browser sandbox; exploitation requires user interaction. Google rated the upstream severity as Critical for Chrome on Android, while Red Hat's impact rating of Important for the affected community streams reflects the community-maintained packaging scope and the user interaction required for exploitation.
Mitigation
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
