PT-2025-51793 · Google+2 · Google Chrome+2

Shaheen Fazim · Published 2025-12-16 · Updated 2026-03-01 · CVE-2025-14766

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 143.0.7499.147

Description A flaw exists in the V8 component of Google Chrome that could allow a remote attacker to exploit heap corruption. This is due to an out-of-bounds read and write condition triggered by a specially crafted HTML page. The security severity is rated as High.

Recommendations Update Google Chrome to version 143.0.7499.147 or later.

Fix

DoS

Out of bounds Read

Memory Corruption

Weakness Enumeration

CWE-125

CWE-787

Related Identifiers

BDU:2025-16320

CVE-2025-14766

DSA-6089-1

OPENSUSE-SU-2025:15831-1

OPENSUSE-SU-2025:20178-1

Affected Products

Debian

Google Chrome

Red Os

References · 33

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-14766 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-14766 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-6089-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-14766 · Vendor Advisory
• http://repo.red-soft.ru/redos/8.0/x86_64/updates · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2026-0518SE47 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-16320 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-14766 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2025:15831-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-14766 · Security Note
• https://safe-surf.ru/specialists/bulletins-nkcki/727274 · Security Note
• https://chromereleases.googleblog.com/2025/12/stable-channel-update-for-desktop_16.html · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-14766 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:20178-1 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2026-0421SE17 · Vendor Advisory