p PatchFirst

CVE-2025-6556

CVE-2025-6556

CVSS 5.4 · Medium · EPSS 0.2% · Fix available

Are you affected?

  • chromeNo fix published
  • chromium Debian 12Update to 138.0.7204.49-1~deb12u1
  • chromium Debian 13Update to 138.0.7204.49-1
  • chromium Debian 14Update to 138.0.7204.49-1

Check the installed version:

dpkg-query -W -f='${source:Package} ${binary:Package} ${Version}\n' | awk '$1=="chromium"'

The free check shows your server's rating and highlights whether chrome and the rest of its software need attention. No sign-up; server names and IP addresses are never sent. CVE IDs, fixed versions and recommendations come with paid monitoring.

curl -fsSL https://patchfirst.dev/check.sh | sh
Check your server for free →

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

Insufficient policy enforcement in Loader in Google Chrome prior to 138.0.7204.49 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Low)

Published
Updated

Stack: system

Affected products and versions

  • chrome

    Versions
    • ≥ 138.0.7204.49, < 138.0.7204.49: Affected (custom)

    No fix published

  • chromium Debian 12

    Versions
    • 113.0.5672.126-1
    • 114.0.5735.106-1
    • 114.0.5735.106-1~deb11u1
    • 114.0.5735.106-1~deb12u1
    • 114.0.5735.133-1
    • 114.0.5735.133-1~deb11u1
    All versions (187)
    • 114.0.5735.133-1~deb12u1
    • 114.0.5735.198-1
    • 114.0.5735.198-1~deb11u1
    • 114.0.5735.198-1~deb12u1
    • 114.0.5735.90-1
    • 114.0.5735.90-2
    • 114.0.5735.90-2~deb11u1
    • 114.0.5735.90-2~deb12u1
    • 115.0.5790.102-1
    • 115.0.5790.102-2
    • 115.0.5790.170-1
    • 115.0.5790.170-1~deb11u1
    • 115.0.5790.170-1~deb12u1
    • 115.0.5790.98-1
    • 115.0.5790.98-1~deb11u1
    • 115.0.5790.98-1~deb12u1
    • 115.0.5790.98-2
    • 116.0.5845.110-1
    • 116.0.5845.110-1~deb11u1
    • 116.0.5845.110-1~deb12u1
    • 116.0.5845.110-2
    • 116.0.5845.140-1
    • 116.0.5845.140-1~deb11u1
    • 116.0.5845.140-1~deb12u1
    • 116.0.5845.180-1
    • 116.0.5845.180-1~deb11u1
    • 116.0.5845.180-1~deb12u1
    • 116.0.5845.96-1
    • 116.0.5845.96-1~deb11u1
    • 116.0.5845.96-1~deb12u1
    • 116.0.5845.96-2
    • 117.0.5938.132-1
    • 117.0.5938.132-1~deb11u1
    • 117.0.5938.132-1~deb12u1
    • 117.0.5938.132-2
    • 117.0.5938.149-1
    • 117.0.5938.149-1~deb11u1
    • 117.0.5938.149-1~deb12u1
    • 117.0.5938.62-1
    • 117.0.5938.62-1~deb11u1
    • 117.0.5938.62-1~deb12u1
    • 117.0.5938.92-1
    • 118.0.5993.117-1
    • 118.0.5993.117-1~deb11u1
    • 118.0.5993.117-1~deb12u1
    • 118.0.5993.70-1
    • 118.0.5993.70-1~deb11u1
    • 118.0.5993.70-1~deb12u1
    • 119.0.6045.105-1
    • 119.0.6045.105-1~deb11u1
    • 119.0.6045.105-1~deb12u1
    • 119.0.6045.123-1
    • 119.0.6045.123-1~deb11u1
    • 119.0.6045.123-1~deb12u1
    • 119.0.6045.159-1
    • 119.0.6045.159-1~deb11u1
    • 119.0.6045.159-1~deb12u1
    • 119.0.6045.199-1
    • 119.0.6045.199-1~deb11u1
    • 119.0.6045.199-1~deb12u1
    • 120.0.6099.109-1
    • 120.0.6099.109-1~deb11u1
    • 120.0.6099.109-1~deb12u1
    • 120.0.6099.129-1
    • 120.0.6099.129-1~deb11u1
    • 120.0.6099.129-1~deb12u1
    • 120.0.6099.199-1
    • 120.0.6099.199-1~deb11u1
    • 120.0.6099.199-1~deb12u1
    • 120.0.6099.216-1
    • 120.0.6099.216-1~deb11u1
    • 120.0.6099.216-1~deb12u1
    • 120.0.6099.224-1
    • 120.0.6099.224-1~deb11u1
    • 120.0.6099.224-1~deb12u1
    • 120.0.6099.224-2
    • 120.0.6099.71-1
    • 120.0.6099.71-1~deb11u1
    • 120.0.6099.71-1~deb12u1
    • 121.0.6167.139-1
    • 121.0.6167.139-1~deb12u1
    • 121.0.6167.160-1
    • 121.0.6167.160-1~deb12u1
    • 121.0.6167.85-1
    • 121.0.6167.85-1~deb12u1
    • 122.0.6261.111-1
    • 122.0.6261.111-1~deb12u1
    • 122.0.6261.128-1
    • 122.0.6261.128-1~deb12u1
    • 122.0.6261.57-1
    • 122.0.6261.57-1~deb12u1
    • 122.0.6261.94-1
    • 122.0.6261.94-1~deb12u1
    • 123.0.6312.105-1
    • 123.0.6312.105-1~deb12u1
    • 123.0.6312.105-1~deb13u1
    • 123.0.6312.105-2
    • 123.0.6312.122-1
    • 123.0.6312.122-1~deb12u1
    • 123.0.6312.58-1
    • 123.0.6312.86-1
    • 123.0.6312.86-1~deb12u1
    • 124.0.6367.118-1
    • 124.0.6367.118-1~deb12u1
    • 124.0.6367.155-1
    • 124.0.6367.155-1~deb12u1
    • 124.0.6367.201-1
    • 124.0.6367.201-1~deb12u1
    • 124.0.6367.207-1
    • 124.0.6367.207-1~deb12u1
    • 124.0.6367.60-1
    • 124.0.6367.60-1~deb12u1
    • 124.0.6367.60-2
    • 124.0.6367.78-1
    • 124.0.6367.78-1~deb12u1
    • 125.0.6422.112-1
    • 125.0.6422.112-1~deb12u1
    • 125.0.6422.141-1
    • 125.0.6422.141-1~deb12u1
    • 125.0.6422.60-1
    • 125.0.6422.60-1~deb12u1
    • 125.0.6422.76-1
    • 125.0.6422.76-1~deb12u1
    • 126.0.6478.114-1
    • 126.0.6478.114-1~deb12u1
    • 126.0.6478.126-1
    • 126.0.6478.126-1~deb12u1
    • 126.0.6478.126-1~deb13u1
    • 126.0.6478.182-1
    • 126.0.6478.182-1~deb12u1
    • 126.0.6478.56-1
    • 126.0.6478.56-1~deb12u1
    • 127.0.6533.119-1
    • 127.0.6533.119-1~deb13u1
    • 127.0.6533.88-1
    • 127.0.6533.88-1~deb12u1
    • 127.0.6533.99-1
    • 127.0.6533.99-1~deb12u1
    • 128.0.6613.113-1
    • 128.0.6613.113-1~deb12u1
    • 128.0.6613.113-1~deb13u1
    • 128.0.6613.119-1
    • 128.0.6613.119-1~deb12u1
    • 128.0.6613.137-1
    • 128.0.6613.137-1~deb12u1
    • 128.0.6613.84-1
    • 128.0.6613.84-1~deb12u1
    • 129.0.6668.100-1
    • 129.0.6668.100-1~deb12u1
    • 129.0.6668.100-2
    • 129.0.6668.58-1
    • 129.0.6668.58-1~deb12u1
    • 129.0.6668.70-1
    • 129.0.6668.70-1~deb12u1
    • 129.0.6668.89-1
    • 129.0.6668.89-1~deb12u1
    • 130.0.6723.116-1
    • 130.0.6723.116-1~deb12u1
    • 130.0.6723.58-1
    • 130.0.6723.58-1~deb12u1
    • 130.0.6723.69-1
    • 130.0.6723.69-1~deb12u1
    • 130.0.6723.91-1
    • 130.0.6723.91-1~deb12u1
    • 130.0.6723.91-2
    • 131.0.6778.108-1
    • 131.0.6778.108-1~deb12u1
    • 131.0.6778.139-1
    • 131.0.6778.139-1~deb12u1
    • 131.0.6778.204-1
    • 131.0.6778.204-1~deb12u1
    • 131.0.6778.264-1
    • 131.0.6778.264-1~deb12u1
    • 131.0.6778.85-1
    • 131.0.6778.85-1~deb12u1
    • 132.0.6834.110-1
    • 132.0.6834.110-1~deb12u1
    • 132.0.6834.159-1
    • 132.0.6834.159-1~deb12u1
    • 132.0.6834.83-1
    • 133.0.6943.126-1

    Update to 138.0.7204.49-1~deb12u1

  • chromium Debian 13

    Affected ranges
    • ECOSYSTEM: < 138.0.7204.49-1

    Update to 138.0.7204.49-1

  • chromium Debian 14

    Affected ranges
    • ECOSYSTEM: < 138.0.7204.49-1

    Update to 138.0.7204.49-1

Original sources

Check your server →