The high-severity flaw, which was patched in the latest version of Google s Chrome browser, could allow code execution. The flaw (CVE-2020-6492) is a use-after-free vulnerability in the WebGL (Web Graphics Library) component of Chrome browser. Researchers said this vulnerability specifically exists in ANGLE, a compatibility layer between OpenGL and Direct3D used on Windows by Chrome browser and other project projects. The fix has been fixed in the Chrome 85 stable channel set to be rolled out to users this week.
Source: https://threatpost.com/google-fixes-high-severity-chrome-browser-code-execution-bug/158600/