← Back

CVE-2025-6558

nvd nist
Published: Jul 15, 2025Modified: Oct 1, 2026CISA KEV

JSON object

Loading...
8.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 5.9
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

Affected (10)

Show all products
Google: Chrome · Debian: Debian Linux · Apple: Ipados, Iphone Os, Macos, Safari, Visionos, Watchos · Wpewebkit: Wpe Webkit · Webkitgtk: Webkitgtk
Google
1 product
Chrome
Debian
1 product
Debian Linux
Apple
6 products
Ipados
Iphone Os
Macos
Safari
Visionos
Watchos
Wpewebkit
1 product
Wpe Webkit
Webkitgtk
1 product
Webkitgtk
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Chrome
version < 138.0.7204.157
Configuration B
1 vulnerable
Vulnerable SoftwareAffected Versions
Debian Linux
Version 11.0
Configuration C
6 vulnerable
Vulnerable SoftwareAffected Versions
Ipados
version < 18.6
Iphone Os
version < 18.6
Macos
version < 15.6
Safari
version < 18.6
Visionos
version < 2.6
Watchos
version < 11.6
Configuration D
1 vulnerable
Vulnerable SoftwareAffected Versions
Wpe Webkit
version < 2.48.5
Configuration E
1 vulnerable
Vulnerable SoftwareAffected Versions
Webkitgtk
version < 2.48.5

Related CWEs

CWE-20
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (11)

Source: chrome-cve-admin@google.com
Release Notes
Source: chrome-cve-admin@google.com
Issue TrackingPermissions Required
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing List
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing List
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
US Government Resource

Timeline

No history available yet.