← CVE Tracker
8.8HIGHCISA KEV — actively exploited

CVE-2025-6558 — Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157…

Google · Chrome · Published 15 Jul 2025 · Modified 1 Oct 2026

Description

Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

References

What to do
  1. Check whether Chrome is in your asset inventory.
  2. Exploitation confirmed — patch within 72 hours.
  3. Record the decision in your risk register for audit evidence.
Alert me on similar CVEs →
Share

Link: adminadda.com/cve/CVE-2025-6558