Tag

#webrtc

1 post tagged #webrtc.

Analysis · May 20, 2026 · Colten Anderson

A browser bug, sold as a weapon, pointed at journalists

CVE-2022-2294 was a heap overflow in WebRTC, the real-time-comms code inside Chrome and other browsers. It wasn't used for mass crime. A surveillance vendor, Candiru, used it to plant DevilsTongue spyware on journalists in the Middle East. Different threat model, same patch.