Vulnerability Detail
Enriched intelligence for a single CVE
High
CVE-2025-6554
PUBLISHEDType confusion in V8 in Google Chrome prior to 138.0.7204.96 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page....
1 day faster than CISA KEV
- Vendor
- Product
- Chrome
- Published
- Jun 30, 2025
- EPSS
- 1.6% · 82% pctl
Automate This Intelligence with the Pro API
Everything on this page — CVSS, EPSS, exploit status, PoCs, scanner integrations, mentions, tags, and immediate honeypot data — is available programmatically for VM, SOC, and CTI workflows.
Description
Type confusion in V8 in Google Chrome prior to 138.0.7204.96 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High)
Weaknesses (CWE)
-
Access of Resource Using Incompatible Type ('Type Confusion')
CVSS Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Exploitation Status
Exploited in the wild
Recorded 2026-06-01 10:36:20 UTC · CVE
Known Exploited Vulnerability Sources
Catalogues that list this CVE as a known exploited vulnerability.
| Source | Added |
|---|---|
| CVE First | 2026-06-01 10:36 UTC |
| CISA | 2026-06-02 14:07 UTC |
Timeline
-
KEV confirmed by CISA
-
Added to KEVIntel
-
CVE Published to Public
-
CVE ID Reserved