Vulnerability Spotlight: Information leak vulnerability in Google Chrome WebGL

Summary: Cisco Talos researcher Marcin Towalski discovered an information disclosure vulnerability in the WebGL functionality of Google Chrome 83.0.4103.116 (Stable) and 86.0.4198.0 (Developer Build), tracked as TALOS-2020-1123/CVE-2020-6555, where specially crafted JavaScript causes an out-of-bounds read. The victim must visit a specially crafted malicious web page to trigger it, and Talos worked with Google under its coordinated disclosure policy to resolve the issue and release an update.
What's compelling: The trigger is simply visiting a malicious page in one of the most widely used browsers, and Talos published Snort rules 54584 and 54585 to detect exploitation attempts.

Read the original at Cisco Talos ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2020-6555
Related: Vulnerability Spotlight: Code execution vulnerability in Google Chrome WebGL Cyber Risks ·
Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026