CVE-2025-6554
KEVHIGH 8.1EPSS 14.1%
Type confusion in V8 in Google Chrome prior to 138.0.7204.96 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High)
- Affected
- Google · Chrome
- CVSS v3.1 CNA
- 8.1 HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N - EPSS
- 14.14% chance of exploitation in the next 30 days, 97th percentile
- CISA KEV
- added 2025-07-02
- Published
- 2025-06-30
- Updated
- 2025-10-21
Proof-of-concept exploits (9)
- DarkNavySecurity/PoC226★ · 2025-08-27
- PwnToday/CVE-2025-65542★ · 2025-08-28
- ghostn4444/POC-CVE-2025-65541★ · 2025-07-09
- gmh5225/CVE-2025-65540★ · 2025-07-04
- gmh5225/CVE-2025-6554-22★ · 2025-07-04
- LordBheem/CVE-2025-65540★ · 2025-07-10
- aklnjakln/CVE-2025-655431★ · 2025-11-25
- jopraveen/CVE-2025-65545★ · 2025-10-14
- mistymntncop/CVE-2025-655445★ · 2025-10-10