Language:
https://access.redhat.com/security/cve/cve-2025-6558
Severity: High
ID: 247450
File Name: unpatched_CVE_2025_6558.nasl
Version: 1.3
Type: local
Agent: unix
Family: Misc.
Published: 8/10/2025
Updated: 9/3/2025
Supported Sensors: Frictionless Assessment AWS, Frictionless Assessment Azure, Frictionless Assessment Agent, Nessus Agent, Agentless Assessment, Nessus
Risk Factor: Critical
Score: 9.4
Risk Factor: Medium
Base Score: 6.8
Temporal Score: 5.6
Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P
CVSS Score Source: CVE-2025-6558
Risk Factor: High
Base Score: 8.8
Temporal Score: 8.2
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:F/RL:O/RC:C
CPE: cpe:/o:debian:debian_linux:11.0, p-cpe:/a:debian:debian_linux:wpewebkit, p-cpe:/a:centos:centos:webkitgtk4-jsc-devel, cpe:/o:canonical:ubuntu_linux:16.04:-:lts, cpe:/o:canonical:ubuntu_linux:22.04:-:lts, cpe:/o:canonical:ubuntu_linux:24.04:-:lts, p-cpe:/a:redhat:enterprise_linux:webkitgtk4-jsc-devel, cpe:/o:centos:centos:7, p-cpe:/a:centos:centos:webkitgtk4-doc, p-cpe:/a:redhat:enterprise_linux:webkitgtk4-doc, p-cpe:/a:centos:centos:webkitgtk4, p-cpe:/a:debian:debian_linux:chromium, p-cpe:/a:canonical:ubuntu_linux:webkit2gtk, p-cpe:/a:canonical:ubuntu_linux:wpewebkit, p-cpe:/a:redhat:enterprise_linux:webkitgtk4-jsc, p-cpe:/a:redhat:enterprise_linux:webkitgtk4-devel, p-cpe:/a:redhat:enterprise_linux:webkitgtk4, p-cpe:/a:centos:centos:webkitgtk4-plugin-process-gtk2, p-cpe:/a:centos:centos:webkitgtk4-jsc, p-cpe:/a:canonical:ubuntu_linux:webkitgtk, cpe:/o:debian:debian_linux:13.0, cpe:/o:canonical:ubuntu_linux:18.04:-:lts, p-cpe:/a:redhat:enterprise_linux:webkitgtk4-plugin-process-gtk2, cpe:/o:redhat:enterprise_linux:7, p-cpe:/a:canonical:ubuntu_linux:qtwebkit-source, cpe:/o:canonical:ubuntu_linux:20.04:-:lts, cpe:/o:debian:debian_linux:12.0, p-cpe:/a:canonical:ubuntu_linux:qtwebkit-opensource-src, p-cpe:/a:centos:centos:webkitgtk4-devel
Required KB Items: Host/local_checks_enabled, Host/cpu, global_settings/vendor_unpatched, Host/OS/identifier
Exploit Available: true
Exploit Ease: Exploits are available
Vulnerability Publication Date: 7/15/2025
CISA Known Exploited Vulnerability Due Dates: 8/12/2025
CVE: CVE-2025-6558