Google · Chromium
CVE-2025-14174
Google Chromium Out of Bounds Memory Access Vulnerability
Nedir
Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)
CISA: Google Chromium contains an out of bounds memory access vulnerability in ANGLE that could allow a remote attacker to perform out of bounds memory access via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
Ne yapmalı
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
ABD federal kurumları için son tarih: 2 Ocak 2026
Google için istismar edilen diğer açıklar
| Eklenme | Açık | Ürün | Önem | Saldırı olasılığı |
|---|---|---|---|---|
| 17 Şub 2026 | CSS Use-After-Free | Chromium | Yüksek 8,8 | 55% |
| 22 Tem 2025 | ANGLE and GPU Improper Input Validation | Chromium | Yüksek 8,8 | 11% |
| 13 May 2024 | Visuals Use-After-Free | Chromium | Kritik 9,6 | 8,3% |
| 3 Kas 2021 | Race Condition | Chromium | Yüksek 8,8 | 24% |
| 3 Kas 2021 | Information Disclosure | Chromium | Orta 6,5 | 20% |
| 27 Eki 2026 | Unchecked Return Value | Brotli | Kritik 9,2 | 55% |
| 16 Eyl 2026 | Improper Authorization | Pixel | Yüksek 8,8 | 0,6% |
| 9 Eyl 2026 | Out of Bounds Write | Chromium V8 | Yüksek 8,8 | 3,5% |
Kaynaklar: Known Exploited Vulnerabilities (CISA, kamu malı), CVE records (cve.org) ve EPSS (FIRST). Saldırı olasılığı, birinin önümüzdeki 30 günde açığı istismar etmeye çalışacağına dair EPSS tahminidir.