High · published July 15, 2025
CVSS calls it high at 8.8. It is confirmed in active exploitation. It sits in the 95.9th percentile for exploit probability.
🚨 A seemingly harmless HTML page could become an escape route for attackers! With CVE-2025-6558, researchers found a way to bypass Chrome's defenses—yikes! ⚡ Think of it like a sneaky fox that finds a hole in the fence to escape the farm. The HTML page acts as that crafty fox, slipping through the cracks of Chrome's sandbox and accessing areas it shouldn't! If exploited, this vulnerability could allow an attacker to break free from the browser's secure environment, potentially accessing sensitive data or executing harmful code. The consequences could be absolutely devastating, leading to complete compromise of the user’s system!
Think of it like a sneaky fox that finds a hole in the fence to escape the farm. The HTML page acts as that crafty fox, slipping through the cracks of Chrome's sandbox and accessing areas it shouldn't! This issue arises from insufficient validation of untrusted input in ANGLE and GPU components in Google Chrome. An attacker can craft a malicious HTML page that manipulates how Chrome processes data, leading to a sandbox escape.
If exploited, this vulnerability could allow an attacker to break free from the browser's secure environment, potentially accessing sensitive data or executing harmful code. The consequences could be absolutely devastating, leading to complete compromise of the user’s system! Update Google Chrome immediately to version 138.0.7204.157 or later to close this security gap. Encourage users to review their extension permissions and be cautious about opening unfamiliar web pages. You've got this! Stay vigilant and update your browser to keep your digital fortress secure! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| google/chrome | < 138.0.7204.157 | 138.0.7204.157 |
| debian/debian_linux | all versions | — |
| apple/safari | < 18.6 | 18.6 |
| apple/ipados | < 18.6 | 18.6 |
| apple/iphone_os | < 18.6 | 18.6 |
| apple/macos | < 15.6 | 15.6 |
| apple/visionos | < 2.6 | 2.6 |
| apple/watchos | < 11.6 | 11.6 |
| wpewebkit/wpe_webkit | < 2.48.5 | 2.48.5 |
| webkitgtk/webkitgtk | < 2.48.5 | 2.48.5 |