| WebGL Security Risks |
|
US-CERT is aware of reports indicating that WebGL contains multiple significant security issues. The impact of these issues includes arbitrary code execution, denial of service, and cross-domain attacks. WebGL is a new web standard that is enabled by default in Firefox 4 and Google Chrome and is included in Safari. US-CERT encourages users and administrators to review the Context report and disable WebGL to help mitigate the risks. Read more: US-CERT Current Activity |