CVE-2025-6554

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 138.0.7204.96

Description A type confusion issue exists in the V8 JavaScript engine, which is used to execute web pages and applications. This flaw allows a remote attacker to perform arbitrary read and write operations by enticing a user to visit a specially crafted HTML page. Such memory manipulations can lead to remote code execution and are commonly used for sandbox escapes. There are reports of this issue being actively exploited in real-world attacks to execute arbitrary code and compromise systems.

Recommendations Update Google Chrome to version 138.0.7204.96 or later.