VDB
DEBIAN-CVE-2025-6558
DEBIAN-CVE-2025-6558
PUBLISHED
CVSS 8.800000190734863 HIGH
Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
Risk Scores
CVSS 3.1
8.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:11 | chromium | 116.0.5845.110-2, 116.0.5845.140-1, 116.0.5845.140-1~deb12u1 |
| Debian:11 | webkit2gtk | 2.37.1-2, 2.36.7-1, 2.36.7-1 |
| Debian:14 | wpewebkit | 0, 2.48.3-1, 0 |
| Debian:13 | chromium | 0, 0 |
| Debian:14 | webkit2gtk | 0, 2.48.5-1~deb11u1, 2.48.5-1~deb12u1 |
| Debian:12 | wpewebkit | 2.40.1-1, 2.40.2-1, 2.40.2-2 |
| Debian:11 | wpewebkit | 2.48.2-1, 2.48.1-1, 2.32.4-1 |
| Debian:14 | chromium | 0, 0 |
| Debian:12 | webkit2gtk | *, 2.46.1-1, 2.46.1-2 |
| Debian:13 | webkit2gtk | 2.48.5-1, 2.48.3-1, 0 |
| Debian:13 | wpewebkit | 2.50.5-1, 2.50.4-1, 2.50.3-1 |
| Debian:12 | chromium | 137.0.7151.103-1~deb12u1, 137.0.7151.103-1, 136.0.7103.92-2 |
Timeline
- Jul 15, 2025 CVE Published
- Apr 28, 2026 CVE Updated