WebGL

Chrome is rolling out an update that includes 15 security fixes for its desktop versions on Windows, Mac, and Linux. The update addresses two critical buffer overflow vulnerabilities: CVE-2026-76034 in WebGL and CVE-2026-76036 in Dawn. These flaws could allow a remote attacker to execute arbitrary code outside the browser sandbox.

Google released a Chrome update addressing 18 vulnerabilities, including four critical flaws. The update, rolling out to Windows, Mac, Linux, and Android, includes fixes for two critical WebGL vulnerabilities (CVE-2026-13028 and CVE-2026-13032) that could enable sandbox escapes via crafted HTML pages.

A CSS 3D Engine called 'polycss' has been developed by LayoutitStudio and showcased on Hacker News. The project does not use WebGL for rendering 3D graphics, relying instead on CSS technology. It is hosted on GitHub with a Hacker News discussion thread.

Cloudflare's Turnstile service is requiring users to enable fingerprintable WebGL, raising privacy concerns. The change involves using WebGL for browser fingerprinting, which can uniquely identify devices.

VidStudio is a browser-based video editor prioritizing privacy by keeping all processing and data on the user's device. It features a multi-track timeline, frame-accurate seeking, and supports various media types, with technical underpinnings including WebCodecs, FFmpeg (WebAssembly), and Pixi.js for rendering.