A renderer is a software component that turns content-such as HTML, images, or documents-into a visual display inside an application or desktop window. Browsers use renderers to show web pages; developer tools may use them for file previews.
Renderers matter in cybersecurity because they process content that may be untrusted. If a renderer is poorly isolated or granted access to local files, credentials, or network connections, malicious content could exploit that access. In an attack, a crafted HTML file opened in a preview pane might attempt to read data or send it elsewhere. Defenses include isolating rendering processes, limiting file and network permissions, and treating repository content and previews as untrusted. A renderer is not inherently unsafe, but its privileges and separation from the rest of the app determine the risk.