← Back to browse · API

CVE-2025-6558

Severity
HIGH
CVSS
8.8
EPSS
0.09185
Risk score
63.41
CISA KEV
Yes
PoC
No
Published
2025-07-15
Modified
2026-02-26
First seen
2026-08-07
Aliases
EUVD-2025-21546, GHSA-5W32-633G-38JH
Products
Google:Chrome 138.0.7204.157 <138.0.7204.157, Google:Chromium
Sources
euvd EUVD-2025-21546
cisa.gov CVE-2025-6558

Description

Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

References