Threat Intelligence / CVE / CVE-2025-6554

CVE-2025-6554

CISA KEV

CVSS 8.1 (HIGH) · EPSS 0.9% · Published 2025-06-30

Type confusion in V8 in Google Chrome prior to 138.0.7204.96 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High)

CVSS v3 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Weaknesses (CWE)

CWE-843

Threats tracking this CVE

Predator Spyware iOS SpringBoard Hook — Intellexa Recording Indicator Bypass via Kernel-Level Sensor Interception — HIGH

References

https://chromereleases.googleblog.com/2025/06/stable-channel-update-for-desktop_30.html
https://issues.chromium.org/issues/427663123
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-6554

Full detection coverage & IOCs for threats exploiting CVE-2025-6554 are available via the Threadlinqs MCP server (Purple tier). View plans →

Markdown version · Threadlinqs Intelligence