vulnerability

Alpine Linux: CVE-2025-6556: Authentication Bypass Using an Alternate Path or Channel

Severity
6
CVSS
(AV:N/AC:M/Au:N/C:P/I:P/A:N)
Published
Jun 24, 2025
Added
Dec 5, 2025
Modified
Dec 5, 2025

Description

Insufficient policy enforcement in Loader in Google Chrome prior to 138.0.7204.49 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Low)

Solution

alpine-linux-upgrade-qt6-qtwebengine
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.