CVE Watch—

CVE-2025-14174

Google Chromium Out of Bounds Memory Access Vulnerability

CVSS

—

Sin CVSS

EPSS

22.6%

p98

KEV

SÍ

12 dic 2025

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

22.6%EPSS · 30 días22.7%

2026-08-022026-08-31

Ficha del catálogo KEV

Producto

Google / Chromium

Vulnerabilidad

Google Chromium Out of Bounds Memory Access Vulnerability

Añadido a KEV

12 dic 2025

Remediar antes de

2 ene 2026

Uso conocido en ransomware

Descripción resumida

Google Chromium contains an out of bounds memory access vulnerability in ANGLE that could allow a remote attacker to perform out of bounds memory access via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

Acción requerida

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notas

https://chromereleases.googleblog.com/2025/12/stable-channel-update-for-desktop_10.html ; https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security ; https://nvd.nist.gov/vuln/detail/CVE-2025-14174

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2021-21166—

97.9%

KEV—79Google Chromium Race Condition Vulnerability—CVE-2026-2441—

97.5%

KEV—79Google Chromium CSS Use-After-Free Vulnerability—CVE-2021-37976—

97.2%

KEV—79Google Chromium Information Disclosure Vulnerability—CVE-2025-6558—

95.1%

KEV—79Google Chromium ANGLE and GPU Improper Input Validation Vulnerability—CVE-2024-4671—

94.5%

KEV—78Google Chromium Visuals Use-After-Free Vulnerability—