U.S. Flag Official website of the Department of Homeland Security
TLP:WHITE

WebGL Security Risks

Original release date: May 11, 2011 | Last revised: October 23, 2012

US-CERT is aware of reports indicating that WebGL contains multiple significant security issues. The impact of these issues includes denial of service, and cross-domain attacks. WebGL is a new web standard that is enabled by default in Firefox 4 and Google Chrome and is included in Safari.

US-CERT encourages users and administrators to review the Context report and update their systems as necessary to help mitigate the risks.

This product is provided subject to this Notification and this Privacy & Use policy.

Was this document helpful?  Yes  |  Somewhat  |  No

Back to Top