Vulnerability Spotlight: Code execution vulnerability in Google Chrome WebGL

Summary: Cisco Talos researcher Marcin Towalski discovered a code execution vulnerability in Google Chrome's WebGL API, tracked as TALOS-2020-1127/CVE-2020-6555, where specially crafted JavaScript can cause an out-of-bounds read when a victim visits a malicious web page. Talos confirmed Chrome version 83.0.4103.61 and developer build 85.0.4169.0 are affected, worked with Google on an update, and released Snort rules 54638 and 54639 to detect exploitation attempts.
Bottom line: The trigger is a single malicious web page visited in Chrome, one of the most widely used browsers, so the exposure reaches any user who browses to the wrong link before Google's fix is applied.

Read the original at Cisco Talos ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2020-6555
Related: Vulnerability Spotlight: Information leak vulnerability in Google Chrome WebGL Cyber Risks ·
Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026