Firetruck

CVE-2025-6558

KEV
Updated Oct 1, 2026 · PUBLISHED
View KEV entry →

Description

Google Chromium contains an improper input validation vulnerability in ANGLE and GPU. This vulnerability could allow a remote attacker to potentially perform a sandbox escape via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
ChromeGoogle / Chrome>= 138.0.7204.157, < 138.0.7204.157affected