CVE-2025-14174 - PatchNow

Data Source: CIRCL

Confidence: HIGH

Exploitation Method: USER_INTERACTION

CVE Published: 2025-12-12

Added to CISA KEV: 2025-12-12 0 DAY BETWEEN CVE AND KEV

CRITICAL: Check for indicators of compromise - this vulnerability is in CISA KEV indicating active exploitation in the wild. Review browser history, check for suspicious web activity, verify system integrity on workstations
Update Chrome immediately to version 143.0.7499.110 or later across all user devices
Deploy browser updates via enterprise management tools if available
Monitor web traffic logs for suspicious patterns and known malicious domains
Educate users about avoiding suspicious websites and links
Consider implementing web filtering and DNS protection services

Here's what is known about the CVE-2025-14174 vulnerability:

Affected applications: CVE-2025-14174 affects web browsers that utilize Chromium, including Google Chrome and Microsoft Edge ^[2].
CISA KEV Status: CISA has added CVE-2025-14174 to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation ^[3]^[4].
Active Exploitation: The vulnerability is actively being exploited in the wild ^[1].
Attack Vectors/Exploitation Method: Attackers can potentially execute arbitrary code by crafting malicious web content ^[1].
Targeted Attacks: CVE-2025-14174 has been reportedly used in a sophisticated, targeted attack against specific individuals on iOS versions before iOS 26 ^[1].
Internet facing: These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks ^[5]^[6].

CVE-2025-14174 - Exploits & Severity - Feedly
Impact. Attackers could potentially execute arbitrary code by crafting malicious web content. The vulnerability has been reported as being used in an extremely sophisticated targeted attack against specific individuals on versions of iOS before iOS 26. This suggests a high-risk, precision-targeted e…
Known Exploited Vulnerabilities Catalog
CVE-2025-14174 This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and ...
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.
CISA Adds Three Known Exploited Vulnerabilities to Catalog
CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
CISA Adds One Vulnerability to the KEV Catalog | CISA
CVE-2025-0282. Ivanti Connect Secure Vulnerability. These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise. CISA urges organizations to apply mitigations as set forth in the CISA instructions linked below to include…

🟢 CVE-2025-14174