Vulnerability intelligence
CVE-2025-14174
Google Chromium Out of Bounds Memory Access Vulnerability
Google Chromium
Google Chromium contains an out of bounds memory access vulnerability in ANGLE that could allow a remote attacker to perform out of bounds memory access via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
CVSS Score
—
Unrated
EPSS — Exploit Probability
23%
Riskier than 98% of all CVEs · checked 2026-09-04
Exploitation
Confirmed in the wild
KEV since 2025-12-12
Remediation
Unconfirmed
Federal deadline 2026-01-02
CISA required action
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. Deadline for federal agencies: 2026-01-02.
8 articles across 6 outlets · first covered Feb 12, 2026 · latest Mar 19, 2026
Coverage timeline
-
DarkSword iOS Exploit Kit Uses 6 Flaws, 3 Zero-Days for Full Device Takeoverthehackernews.com · Mar 19, 2026
-
DarkSword: iPhone Exploit Kit Serves Spies & Thieves Alikewww.darkreading.com · Mar 18, 2026
-
‘DarkSword’ iOS Exploit Kit Used by State-Sponsored Hackers, Spyware Vendorswww.securityweek.com · Mar 18, 2026
-
Apple patches zero-day flaw that could let attackers take control of deviceswww.malwarebytes.com · Feb 12, 2026
-
Apple fixed first actively exploited zero-day in 2026securityaffairs.com · Feb 12, 2026
-
Apple Patches iOS Zero-Day Exploited in ‘Extremely Sophisticated Attack’www.securityweek.com · Feb 12, 2026
-
Apple Fixes Exploited Zero-Day Affecting iOS, macOS, and Apple Devicesthehackernews.com · Feb 12, 2026
-
Apple Zero-Day (CVE-2026-20700) Exploited in the Wildsecurityonline.info · Feb 12, 2026