Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2025-6557

Опубликовано: 24 июн. 2025
Источник: debian
EPSS Низкий

Описание

Insufficient data validation in DevTools in Google Chrome on Windows prior to 138.0.7204.49 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. (Chromium security severity: Low)

Пакеты

ПакетСтатусВерсия исправленияРелизТип
chromiumfixed138.0.7204.49-1package
chromiumend-of-lifebullseyepackage

EPSS

Процентиль: 15%
0.00048
Низкий

Связанные уязвимости

CVSS3: 5.4
ubuntu
13 дней назад

Insufficient data validation in DevTools in Google Chrome on Windows prior to 138.0.7204.49 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. (Chromium security severity: Low)

CVSS3: 5.4
nvd
13 дней назад

Insufficient data validation in DevTools in Google Chrome on Windows prior to 138.0.7204.49 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. (Chromium security severity: Low)

msrc
11 дней назад

Chromium: CVE-2025-6557 Insufficient data validation in DevTools

CVSS3: 5.4
github
13 дней назад

Insufficient data validation in DevTools in Google Chrome on Windows prior to 138.0.7204.49 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. (Chromium security severity: Low)

EPSS

Процентиль: 15%
0.00048
Низкий