CWE data temporarily unavailableCWE data is currently experiencing intermittent outages, which may cause incomplete section loading on CVE pages. We are actively working on a fix.

CVE-2025-14766

Description

A flaw was found in V8 in Google Chrome. This vulnerability allows a remote attacker to potentially exploit heap corruption via a crafted HyperText Markup Language (HTML) page.

Statement

This vulnerability is rated Critical for Red Hat as it affects the chromium-browser component. A remote attacker could exploit heap corruption via a crafted HTML page, leading to potential arbitrary code execution. User interaction, such as visiting a malicious website, is required for exploitation.

Mitigation

To mitigate this issue, users should avoid visiting untrusted websites or opening untrusted web content. Employing a sandboxed environment for web browsing can further reduce the risk of exploitation.

Frequently Asked Questions

Want to get errata notifications? Sign up here.