Skip to main content
cvebuzz

CVE mentions, exploit signals, and PoC evidence in one fast public view.

CVE detail

CVE-2025-6558

Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVSS 8.8 · HighBuzz score 66.6KEV listed

Buzz score

Why this CVE is surfacing

Buzz score total 66.6

This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.

Buzz score components · mention 27.1 · diversity 14.5 · KEV 25.0 · OTX 0.0 · PoC 0.0
Mention score
27.1
14 evidence mentions in the snapshot
Diversity score
14.5
5 sources across 2 categories
KEV score
25.0
Known exploited vulnerability present
OTX score
0.0
0 OTX pulses
PoC score
0.0
0 repos · best confidence N/A
Best PoC traction
0
Maximum stars on a matched PoC repo

Why it matters now

Mention timeline

Total mentions
0
within the 30d window
Peak daily
0
highest bucket

Evidence

Source links by recency

Newest mentions first
14 source links · newest first
  • Google fixed a new actively exploited Chrome zero-daySecurity Affairs

    Google addressed three vulnerabilities in the Chrome browser, including a high-severity bug already exploited in the wild. Google released security updates to fix three vulnerabilities in the Chrome browser, including a high-severity flaw that threat actors are already exploiting in real-world attacks. “Google is aware that an exploit for 466192044 exists in the wild,” reads […]

    newssecurityaffairs.comDec 11, 2025, 6:18 PM
  • Google fixed the seventh Chrome zero-day in 2025Security Affairs

    Google patched two Chrome flaws, including a V8 type-confusion bug, tracked as including CVE-2025-13223, which was exploited in the wild. Google released Chrome security updates to address two flaws, including a high-severity V8 type confusion bug tracked as CVE-2025-13223 that has been actively exploited in the wild. The Chrome V8 engine is Google’s open-source JavaScript […]

    newssecurityaffairs.comNov 18, 2025, 8:59 AM
  • CVE-2025-10585 is the sixth actively exploited Chrome zero-day patched by Google in 2025Security Affairs

    Google addressed four vulnerabilities affecting its Chrome web browser, including one that has been exploited in the wild. Google released security updates to address four vulnerabilities in the Chrome web browser, including CVE-2025-10585, which has reportedly been exploited in the wild. “Google is aware that an exploit for CVE-2025-10585 exists in the wild.” reads the […]

    newssecurityaffairs.comSep 18, 2025, 8:57 AM
  • August 2025 Patch Tuesday forecast: Try, try againHelp Net Security

    July turned into a surprisingly busy month. It started slowly with a fairly ‘calm’ Patch Tuesday as I forecasted in my last blog. Although there were 130 new CVEs addressed across all the Microsoft releases, there was only one publicly disclosed CVE, so the risk was low. But a short time later, two CVEs in SharePoint were reported exploited, and the month started to heat up with hotfixes near the end of the month. Mix … More →

    newswww.helpnetsecurity.comAug 8, 2025, 6:20 AM
  • Apple fixed a zero-day exploited in attacks against Google Chrome usersSecurity Affairs

    Apple addressed a high-severity vulnerability that has been exploited in zero-day attacks targeting Google Chrome users. Apple released security updates to address a high-severity vulnerability, tracked as CVE-2025-6558 (CVSS score of 8.8), that has been exploited in zero-day attacks targeting Google Chrome users. The vulnerability is an insufficient validation of untrusted input in ANGLE and […]

    newssecurityaffairs.comJul 30, 2025, 6:09 PM
  • Apple Patches Safari Vulnerability Flagged as Exploited Against ChromeSecurityWeek

    Tracked as CVE-2025-6558, the flaw was found in Chrome’s ANGLE and GPU components and was flagged as exploited by Google TAG.

    newswww.securityweek.comJul 30, 2025, 8:52 AM
  • U.S. CISA adds CrushFTP, Google Chromium, and SysAid flaws to its Known Exploited Vulnerabilities catalogSecurity Affairs

    U.S. CISA adds CrushFTP, Google Chromium, and SysAid flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added CrushFTP, Google Chromium, and SysAid flaws to its Known Exploited Vulnerabilities (KEV) catalog. Below are the descriptions for these flaws: This week CrushFTP warned of a zero-day, tracked as CVE-2025-54309 (CVSS score of 9.0), […]

    newssecurityaffairs.comJul 24, 2025, 6:48 AM
  • High-Severity Flaws Patched in Chrome, FirefoxSecurityWeek

    Fresh security updates for Chrome and Firefox resolve multiple high-severity memory safety vulnerabilities.

    newswww.securityweek.comJul 23, 2025, 9:58 AM
  • 21st July – Threat Intelligence ReportCheck Point Research

    For the latest discoveries in cyber research for the week of 21st July, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Luxury retailer Louis Vuitton has suffered a cyber-attack that resulted in the exfiltration of certain personal data of customers from the UK, South Korea, Turkey, Italy, and Sweden after unauthorized access to […]

    vendorresearch.checkpoint.comJul 21, 2025, 6:59 PM
  • Week in review: Google fixes zero-day vulnerability in Chrome, critical SQL injection flaw in FortiWebHelp Net Security

    Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Update Google Chrome to fix actively exploited zero-day (CVE-2025-6558) For the fifth time this year, Google has patched a Chrome zero-day vulnerability (CVE-2025-6558) exploited by attackers in the wild. Exploits for unauthenticated FortiWeb RCE are public, so patch quickly! (CVE-2025-25257) With two proof-of-concept (PoC) exploits made public late last week, CVE-2025-25257 – a critical SQL command injection vulnerability in Fortinet’s … More →

    newswww.helpnetsecurity.comJul 20, 2025, 8:00 AM
  • Chrome fixes 6 security vulnerabilities. Get the update now!Malwarebytes Labs

    Google has released an update for its Chrome browser to patch six security vulnerabilities including one zero-day.

    newswww.malwarebytes.comJul 17, 2025, 12:36 PM
  • Update Google Chrome to fix actively exploited zero-day (CVE-2025-6558)Help Net Security

    For the fifth time this year, Google has patched a Chrome zero-day vulnerability (CVE-2025-6558) exploited by attackers in the wild. About CVE-2025-6558 CVE-2025-6558 is a high-severity vulnerability that stems from incorrect validation of untrusted input in ANGLE – the Almost Native Graphics Layer Engine used by the browser – and GPU, Chrome’s Graphics Processing Unit that accelerates rendering tasks. Reported on June 23 by Google Threat Analysis Group researchers Clément Lecigne and Vlad Stolyarov, CVE-2025-6558 … More →

    newswww.helpnetsecurity.comJul 16, 2025, 1:31 PM
  • CVE-2025-6554 marks the fifth actively exploited Chrome Zero-Day patched by Google in 2025Security Affairs

    Google released security patches to address multiple Chrome vulnerabilities, including one flaw that has been exploited in the wild. Google released fixes for six Chrome flaws, including one actively exploited in the wild tracked as CVE-2025-6558 (CVSS score of 8.8). CVE-2025-6558 stems from improper validation of untrusted input in Chrome’s ANGLE and GPU components. Clément […]

    newssecurityaffairs.comJul 16, 2025, 10:11 AM
  • Chrome Update Patches Fifth Zero-Day of 2025SecurityWeek

    Google has released a Chrome 138 security update that patches a zero-day, the fifth resolved in the browser this year.

    newswww.securityweek.comJul 16, 2025, 6:57 AM

Exploit code

Public exploit repository references

Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.

0 repository references · best confidence N/A · max 0 stars
No public PoC repositories have been matched yet.

Related records

Similar CVEs

6 related CVEs with shared weakness or product evidence