PT-2025-26786

CVE-2025-6556

Published

2025-06-24

Updated

2025-10-08

Description by

CVSS 2.0

6.4

Medium

MetricsAV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 138.0.7204.49

Description: The issue is related to insufficient policy enforcement in the Loader component, allowing a remote attacker to bypass content security policy via a crafted HTML page. This could potentially affect a significant number of devices worldwide, given the popularity of Google Chrome.

Recommendations: For versions prior to 138.0.7204.49, update to version 138.0.7204.49 or later to resolve the issue.

Exploitability

Fix

Impacts

Researchers

Shaheen Fazim

Vendors