Google Chrome Multiple Vulnerabilities

Last Update Date: 15 Dec 2025 Release Date: 11 Dec 2025 18372 Views

RISK: Extremely High Risk

TYPE: Clients - Browsers

Multiple vulnerabilities were identified in Google Chrome. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition and remote code execution on the targeted system.

Note:

CVE-2025-14174 is being exploited in the wild. The vulnerability is caused by out of bounds memory access in ANGLE which could lead to memory corruption. It allows remote attackers to trigger out-of-bounds memory access via a malicious HTML page, potentially leading to arbitrary code execution in browsers. Hence, the risk level is rated as Extremely High Risk.

[Updated on 2025-12-15]

Updated Description, Vulnerability Identifier and Risk Level.

Impact

Remote Code Execution
Denial of Service

System / Technologies affected

Google Chrome prior to 143.0.7499.109 (Linux)
Google Chrome prior to 143.0.7499.109/.110 (Mac)
Google Chrome prior to 143.0.7499.109/.110 (Windows)

Solutions

Before installation of the software, please visit the software vendor web-site for more details.

Apply fixes issued by the vendor:

Update to version 143.0.7499.109 (Linux) or later
Update to version 143.0.7499.109/.110 (Mac) or later
Update to version 143.0.7499.109/.110 (Windows) or later

Vulnerability Identifier

Source

Chrome