CISA Warns of Google Chromium 0-Day Vulnerability Exploited in Attacks

CISA added a critical zero-day (CVE-2025-14174) in Chromium’s ANGLE graphics engine to its Known Exploited Vulnerabilities catalog; the flaw enables out-of-bounds memory access and possible remote code execution via a malicious webpage, affects Chromium-based browsers (Chrome, Edge, Opera), and has been patched in recent stable releases—organizations are urged to apply updates and mitigations immediately despite no public IoCs so far.