Vulnerability Spotlight: Use-after-free condition in Google Chrome WebGL

Summary: Cisco Talos discovered an exploitable use-after-free vulnerability, TALOS-2023-1724 (CVE-2023-1531), in Google Chrome's WebGL JavaScript API, which renders 2-D and 3-D graphics. The flaw triggers when a user opens a specially crafted web page in Chrome, and Talos confirmed that Chrome version 110.0.5481.78 (64-bit) and Chromium version 112.0.5592.0 (64-bit) could be exploited.
Why it matters: Adversaries often use use-after-free conditions to corrupt or leak data on the targeted machine, and exploitation requires only that a user open a crafted page - so the exposure sits with every unpatched browser in your fleet.

Read the original at Cisco Talos ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2023-1531
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026