CNNVD-202507-2006 Information

CNNVD ID

CNNVD-202507-2006

CVE-2025-6558

  • CNNVD Published: 2025-07-15

Description (Chinese)

Google Chrome是美国谷歌(Google)公司的一款Web浏览器。 Google Chrome 138.0.7204.157之前版本存在安全漏洞,该漏洞源于ANGLE和GPU对不可信输入验证不足,可能导致沙箱逃逸。

Description (English)

Google Crome is a Web browser for Google. The previous version of Google Chrome 138.7204.157 had a security loophole, which stemmed from the inadequate verification of untrustworthy inputs by ANGLE and GPU, which could lead to a sandbox escape.

Hazard Level

Medium

Vulnerability Type

输入验证错误

Affected Vendor

GoogleContainerTools

Published

2025-07-15

Last Modified

2026-02-24

References

https://chromereleases.googleblog.com/2025/07/stable-channel-update-for-desktop_15.html https://issues.chromium.org/issues/427162086 https://access.redhat.com/security/cve/cve-2025-6558 https://vigilance.fr/vulnerability/WebKitGTK-denial-of-service-via-ANGLE-GPU-47892 https://nvd.nist.gov/vuln/detail/CVE-2025-6558 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-6558

Patch

https://www.google.com/chrome/dr/download/

Share on: