EXPOSURES › CVE-2025-14174

CVE-2025-14174

HIGH ⌖ ON CISA KEV · EXPLOITED

DETAIL

SourceCISA-KEV · kev Published2025-12-12 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2025-14174 ↗

⚡ RCE ⌖ EXPLOITED IN THE WILD SHAME 72/100 exploited-in-wildrce

Google Chromium out-of-bounds memory access flaw exploited

A critical vulnerability in Google Chromium, used by multiple browsers, was actively exploited, potentially allowing remote attackers to access unauthorized memory and execute arbitrary code.

Shame score — Active exploitation of a critical vulnerability in a widely-used browser engine by an unnamed actor.

▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

PLAYERS IMPLICATED

Google · vendor Chromium · product

DESCRIPTION

Google Chromium contains an out of bounds memory access vulnerability in ANGLE that could allow a remote attacker to perform out of bounds memory access via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

AFFECTED FEDRAMP PRODUCTS · 2

PRODUCT	PROVIDER	STATUS	MATCH
Google Services (Google Cloud Platform Products and underlying Infrastructure) Google	Google	Authorized	vendor-exact · 0.90
Google Workspace Google	Google	Authorized	vendor-exact · 0.90