What is CVE-2025-6558?

CVE-2025-6558 is a security advisory published by Microsoft Security Response Center (MSRC). Chromium: CVE-2025-6558 Incorrect validation of untrusted input in ANGLE and GPU

Which CVE IDs does CVE-2025-6558 cover?

CVE-2025-6558 covers the following CVE IDs: CVE-2025-6558. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by CVE-2025-6558?

CVE-2025-6558 affects 1 product, including: Microsoft Edge (Chromium-based).

CVE-2025-6558

Chromium: CVE-2025-6558 Incorrect validation of untrusted input in ANGLE and GPU

Vendor

Microsoft Security Response Center (MSRC)

Published

July 16, 2025

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2025-6558 →

📋 Description

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. Google is aware that an exploit for CVE-2025-6558 exists in the wild.

🎯 Affected products1

Microsoft Edge (Chromium-based)

✅ Remediation

KBRelease Notes (Security Update) — fixed build 138.0.3351.95

🔗 References (2)

advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-6558
referencehttps://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security