Exploitation Summary
CVE-2025-6558 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added July 22, 2025. EIP tracks 2 public exploits from researchers including DevBuiHieu, gmh5225.
AI-analyzed exploit summary The repository contains only a README.md with a title and no substantive content or exploit code. No technical details or proof-of-concept are provided.
Description
Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
Exploits (2)
The repository contains only a README.md with a title and no substantive content or exploit code. No technical details or proof-of-concept are provided.
This repository contains a writeup for CVE-2025-6558, a critical sandbox escape vulnerability in Google Chrome's ANGLE/GPU components. The vulnerability allows remote code execution via malicious WebGL/HTML content, but no actual exploit code is provided.
References (10)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H