Google Chromium ANGLE and GPU Improper Input Validation Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 22/07/2025. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| safari | < 18.6 | 18.6 |
| chrome | < 138.0.7204.157 | 138.0.7204.157 |
| webkitgtk | < 2.48.5 | 2.48.5 |
| wpe webkit | < 2.48.5 | 2.48.5 |
Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free