#webrtc

0 stories this week · 5 this month · 5 in 6 months · mostly security

Stories per day · 30 days

5 stories, newest first · one card per story

A remote peer can flood the call state machine so the microphone and possibly the camera stay on.

CVE-2026-113380, scored CVSS 4.0 9.3, lets a call peer delay teardown so audio and possibly video continue; no in-the-wild use is known.

CVE-2026-113380, CVSS 9.3, affects RingRTC before 2.72.0; a conceptual proof of concept exists and CISA KEV does not list it.

Fixed builds are 156.0.8078.47 on Linux and 156.0.8078.47 or .48 on Windows and Mac; Google does not report active attacks.

GBHackers9d agohigh

Linux builds are 156.0.8078.47 and Windows and macOS builds are 156.0.8078.47 or .48; exploitation is not addressed.

Stories tagged #webrtc