PT-2025-26785

CVE-2025-6555

·

Published

2025-06-24

·

Updated

2025-07-18

Description by

CVSS 2.0
6.4
Medium
MetricsAV:N/AC:L/Au:N/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 138.0.7204.49
Description: A use after free issue in the Animation component of Google Chrome allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This could lead to remote heap corruption attacks.
Recommendations: For Google Chrome versions prior to 138.0.7204.49, update to version 138.0.7204.49 or later to resolve the issue.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-416: Use After Free
Related identifiers
CVE-2025-6555
BDU:2025-08582
ALT-PU-2025-9065
DSA-5952-1
OPENSUSE-SU-2025:15210-1
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com