Medium

Use-after-free in Google Chrome Password Manager

IdentifiersCVE-2025-14372CWE-416· Use After Free

CVE-2025-14372 is a use-after-free vulnerability in the Password Manager component of Google Chrome prior to version 143.0.7499.110. The flaw arises from improper lifetime management of memory in the Password Manager, allowing a crafted HTML page to trigger access to memory after it has been freed. Google states that successful exploitation could potentially enable a sandbox escape. Publicly available source material does not provide the specific vulnerable function or code path, and Google has limited technical detail disclosure.

For your environment

Are you exposed to this one?

Mallory correlates every CVE against your assets, your vendors, and active adversary campaigns. Know which vulnerabilities matter for you, not just which ones are loud.

Start free trial

ANALYST BRIEF

Impact, mitigation & remediation

What it means. What to do now. Patch path, mitigations, and the assume-compromise checklist.

Impact

What an attacker gets, and what they’ve been doing with it.

Successful exploitation may allow a remote attacker to corrupt memory and cause abnormal browser behavior such as crashes or denial of service. Based on the vendor description, the flaw could also potentially be leveraged for sandbox escape, which would increase impact beyond renderer compromise and could enable broader code execution or system compromise depending on exploit chaining and target environment. Some downstream advisories group this issue with Chrome/Chromium vulnerabilities that may lead to remote code execution.

Mitigation

If you can’t patch tonight, do this now.

Apply vendor patches as soon as possible. Until updates are deployed, reduce exposure to untrusted web content, restrict browsing to trusted sites where feasible, and consider temporary use of alternative fully patched browsers in high-risk environments. Enterprise defenders should enforce browser version compliance and minimize unnecessary browser features or extensions that expand attack surface. No specific workaround beyond patching is documented in the provided material.

Remediation

Patch, then assume compromise.

Upgrade Google Chrome to version 143.0.7499.110 or later. For Chromium-based downstream products, apply the corresponding vendor-provided updates that incorporate the Chromium fix. Debian advises upgrading Chromium to 143.0.7499.109-1~deb12u1 for bookworm or 143.0.7499.109-1~deb13u1 for trixie, and other Chromium-based browsers such as Microsoft Edge or Prisma Browser should be updated to vendor-fixed releases as available.

PUBLIC EXPLOITS

Exploits

No public exploits tracked yet. Mallory keeps watching.

VALID 0 / 0 TOTALView more in app

No public exploit code observed for this vulnerability.

EXPOSURE SURFACE

Affected products & vendors

Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.

VendorProductType

GoogleChromeapplication

Vendor-confirmed product mapping. Mallory continuously reconciles this list against your asset inventory.

ACTIVITY FEED

Recent activity

22 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.

22 SOURCESView more in app

socradar blogNews

Dec 12, 2025

Google Chrome Zero-Day Actively Exploited via ANGLE Graphics Component

A medium-severity use-after-free vulnerability in Chrome's Password Manager that could allow attackers to manipulate freed memory, potentially leading to crashes or unexpected behavior.

Dec 11, 2025

Google fixes super-secret 8th Chrome 0-day

A medium-severity use-after-free vulnerability in Chrome's Password Manager component, tracked as CVE-2025-14372.

Dec 11, 2025

Google fixes super-secret 8th Chrome 0-day

A medium-severity use-after-free vulnerability in Chrome's Password Manager, tracked as CVE-2025-14372, now patched.

securityaffairsNews

Dec 11, 2025

Google fixed a new actively exploited Chrome zero-day

A medium-severity use-after-free vulnerability in Chrome's Password Manager component.

+4 more in the timeline

What this page doesn’t show

The version that knows your environment.

This page is what’s public. Mallory adds the parts that aren’t: which of your assets are affected, which adversaries are exploiting it right now, which detections to deploy, and what to do tonight.

Start free trial

Exposure mapping

Query your assets running an affected version, and investigate the blast radius.

Threat actor evidence

Every observed campaign linking this CVE to a named adversary.

Associated malware

Malware families riding this exploit, with evidence and IOCs.

Detection signatures

YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.

Vendor-by-vendor mapping

Cross-references every affected SKU, including bundled OEM variants.

Social activity10

Community discussion across Reddit, Mastodon, and other social sources.

EXTERNAL REFERENCES

MITRE CVE

cve.org · CVE-2025-14372

NVD

nvd.nist.gov/vuln/detail/CVE-2025-14372

MITRE CWE · CWE-416

Use After Free

Release Notes

chromereleases.googleblog.com/2025/12/stable-channel-update-for-desktop_10.html

Issue Tracking

issues.chromium.org/issues/460599518