ИнструментыУязвимости БДУБлоклистыРасширениеУтилитыБлогAPIМониторинг
Главная → Уязвимости → CVE-2025-6558
8.8высокая

CVE-2025-6558

Описание

Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

Затрагиваемое ПО
Google ChromeDebian Debian linuxApple SafariApple IpadosApple Iphone osApple MacosApple VisionosApple WatchosWpewebkit Wpe webkitWebkitgtk Webkitgtk
CVSS
Балл8.8 — высокая
ВекторCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Источники
https://chromereleases.googleblog.com/2025/07/stable-channel-update-for-desktop_15.htmlhttps://issues.chromium.org/issues/427162086http://seclists.org/fulldisclosure/2025/Aug/0http://seclists.org/fulldisclosure/2025/Jul/30http://seclists.org/fulldisclosure/2025/Jul/32http://seclists.org/fulldisclosure/2025/Jul/35http://seclists.org/fulldisclosure/2025/Jul/37http://www.openwall.com/lists/oss-security/2025/08/02/1