CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Reset
Showing 1โ€“2 of 2 advisories (Page 1/1)
CVE-2025-141748.8/HIGHEPSS 55.3%CISA KEV
2025-12-12

Google Chrome and Microsoft Edge ANGLE Engine Out-of-Bounds Memory Access Vulnerability (CVE-2025-14174) Technical Advisory

[Affected Scope] Google Chrome and Chromium-based browsers (such as Microsoft Edge) on macOS prior to version 143.0.7499.110

[Impact] A remote attacker can trigger out-of-bounds memory access via a crafted HTML page, potentially leading to arbitrary code execution (RCE) or renderer process crashes

[Mitigation] Immediately update all Chromium-based browsers to the latest stable version (143.0.7499.110 or higher) and enforce automated update policies across the enterprise

CVE-2025-65588.8/HIGHEPSS 10.9%CISA KEV
2025-07-15

Google Chrome Sandbox Escape Vulnerability via Insufficient Input Validation in ANGLE and GPU (CVE-2025-6558)

[Affected Scope] Google Chrome and Chromium-based browsers prior to version 138.0.7204.157

[Impact] A remote attacker can bypass the browser sandbox boundaries and potentially execute arbitrary code on the host system via a crafted HTML page

[Mitigation] Immediately update Google Chrome to the latest stable channel version (138.0.7204.157 or higher)

CVE Vulnerability Advisory Database (CVSS ยท CISA KEV ยท EPSS) | CVE Pulse