CVE-2025-6558

Google Chromium contains an improper input validation vulnerability in ANGLE and GPU. This vulnerability could allow a remote attacker to potentially perform a sandbox escape via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

• https://chromereleases.googleblog.com/2025/07/stable-channel-update-for-desktop_15.htmlRelease Notes
• https://issues.chromium.org/issues/427162086Issue Tracking
• http://seclists.org/fulldisclosure/2025/Aug/0Third Party Advisory
• http://seclists.org/fulldisclosure/2025/Jul/30Third Party Advisory
• http://seclists.org/fulldisclosure/2025/Jul/32Third Party Advisory
• http://seclists.org/fulldisclosure/2025/Jul/35Third Party Advisory
• http://seclists.org/fulldisclosure/2025/Jul/37Third Party Advisory
• http://www.openwall.com/lists/oss-security/2025/08/02/1Mailing List
• http://www.openwall.com/lists/oss-security/2026/09/30/18
• https://lists.debian.org/debian-lts-announce/2025/08/msg00015.htmlMailing List
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-6558US Government Resource