CVE details

CVE-2025-6558

Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.

This vulnerability is known to have been exploited in attacks. Update affected browsers immediately.

Severity: High
CVSS: 8.8
Published: 2025-07-15
Fixed in: 138.0.7204.157

Description

Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

Affected products

Google Chrome · → 138.0.7204.157
Chromium · → 138.0.7204.157

Overlaps: Google Chrome, Chromium

Source

View on NVD

Check if your browser is affected