CVE-2025-14174CISA KEV
Google Chromium Out of Bounds Memory Access Vulnerability
CISA lists this Google Chromium vulnerability as known exploited. The vendor's advisory has the fixed versions.
CISA catalog record
Google Chromium contains an out of bounds memory access vulnerability in ANGLE that could allow a remote attacker to perform out of bounds memory access via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
- Product
- Chromium
- Added to KEV
- 12 Dec 2025
- Federal remediation due
- 2 Jan 2026
- Known ransomware use
- Not reported