CVE-2025-14372 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2025-14372 Interim 1 2 2026-03-05T01:24:38Z current 2025-12-23T00:48:37Z 2026-03-05T01:24:38Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2025-14372 Use after free in Password Manager in Google Chrome prior to 143.0.7499.110 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SLES-LTSS-TERADATA 15 SP2 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Server 15 SP3-LTSS SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Linux Enterprise Server for SAP applications 16.0 SUSE Package Hub 15 SP6 openSUSE Leap 15.6 openSUSE Leap 16.0 openSUSE Tumbleweed chromedriver-143.0.7499.109-1.1 chromedriver-143.0.7499.146-bp156.2.209.1 chromedriver-143.0.7499.40-bp160.1.1 chromium-143.0.7499.109-1.1 chromium-143.0.7499.146-bp156.2.209.1 chromium-143.0.7499.40-bp160.1.1 libjavascriptcoregtk-4_0-18 libwebkit2gtk-4_0-37 libwebkit2gtk3-lang typelib-1_0-JavaScriptCore-4_0 typelib-1_0-WebKit2-4_0 typelib-1_0-WebKit2WebExtension-4_0 webkit2gtk-4_0-injected-bundles webkit2gtk3 webkit2gtk3-devel chromedriver-143.0.7499.146-bp156.2.209.1 as a component of SUSE Package Hub 15 SP6 chromium-143.0.7499.146-bp156.2.209.1 as a component of SUSE Package Hub 15 SP6 chromedriver-143.0.7499.146-bp156.2.209.1 as a component of openSUSE Leap 15.6 chromium-143.0.7499.146-bp156.2.209.1 as a component of openSUSE Leap 15.6 chromedriver-143.0.7499.40-bp160.1.1 as a component of openSUSE Leap 16.0 chromium-143.0.7499.40-bp160.1.1 as a component of openSUSE Leap 16.0 chromedriver-143.0.7499.109-1.1 as a component of openSUSE Tumbleweed chromium-143.0.7499.109-1.1 as a component of openSUSE Tumbleweed webkit2gtk3 as a component of SLES-LTSS-TERADATA 15 SP2 libjavascriptcoregtk-4_0-18 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS libwebkit2gtk-4_0-37 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS libwebkit2gtk3-lang as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS typelib-1_0-JavaScriptCore-4_0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS typelib-1_0-WebKit2-4_0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS typelib-1_0-WebKit2WebExtension-4_0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS webkit2gtk-4_0-injected-bundles as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS webkit2gtk3-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS webkit2gtk3 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS libjavascriptcoregtk-4_0-18 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS libwebkit2gtk-4_0-37 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS libwebkit2gtk3-lang as a component of SUSE Linux Enterprise Server 12 SP2-LTSS typelib-1_0-JavaScriptCore-4_0 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS typelib-1_0-WebKit2-4_0 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS typelib-1_0-WebKit2WebExtension-4_0 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS webkit2gtk-4_0-injected-bundles as a component of SUSE Linux Enterprise Server 12 SP2-LTSS webkit2gtk3-devel as a component of SUSE Linux Enterprise Server 12 SP2-LTSS webkit2gtk3 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS libjavascriptcoregtk-4_0-18 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libwebkit2gtk-4_0-37 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libwebkit2gtk3-lang as a component of SUSE Linux Enterprise Server 12 SP4-LTSS typelib-1_0-JavaScriptCore-4_0 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS typelib-1_0-WebKit2-4_0 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS typelib-1_0-WebKit2WebExtension-4_0 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS webkit2gtk-4_0-injected-bundles as a component of SUSE Linux Enterprise Server 12 SP4-LTSS webkit2gtk3 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libjavascriptcoregtk-4_0-18 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libwebkit2gtk-4_0-37 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libwebkit2gtk3-lang as a component of SUSE Linux Enterprise Server 15 SP1-LTSS typelib-1_0-JavaScriptCore-4_0 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS typelib-1_0-WebKit2-4_0 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS typelib-1_0-WebKit2WebExtension-4_0 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS webkit2gtk-4_0-injected-bundles as a component of SUSE Linux Enterprise Server 15 SP1-LTSS webkit2gtk3-devel as a component of SUSE Linux Enterprise Server 15 SP1-LTSS webkit2gtk3 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libjavascriptcoregtk-4_0-18 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS libwebkit2gtk-4_0-37 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS libwebkit2gtk3-lang as a component of SUSE Linux Enterprise Server 15 SP2-LTSS typelib-1_0-JavaScriptCore-4_0 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS typelib-1_0-WebKit2-4_0 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS typelib-1_0-WebKit2WebExtension-4_0 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS webkit2gtk-4_0-injected-bundles as a component of SUSE Linux Enterprise Server 15 SP2-LTSS webkit2gtk3-devel as a component of SUSE Linux Enterprise Server 15 SP2-LTSS webkit2gtk3 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS libjavascriptcoregtk-4_0-18 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS libwebkit2gtk-4_0-37 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS libwebkit2gtk3-lang as a component of SUSE Linux Enterprise Server 15 SP3-LTSS typelib-1_0-JavaScriptCore-4_0 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS typelib-1_0-WebKit2-4_0 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS typelib-1_0-WebKit2WebExtension-4_0 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS webkit2gtk-4_0-injected-bundles as a component of SUSE Linux Enterprise Server 15 SP3-LTSS webkit2gtk3-devel as a component of SUSE Linux Enterprise Server 15 SP3-LTSS webkit2gtk3 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS libjavascriptcoregtk-4_0-18 as a component of SUSE Linux Enterprise Server 15-LTSS libwebkit2gtk-4_0-37 as a component of SUSE Linux Enterprise Server 15-LTSS libwebkit2gtk3-lang as a component of SUSE Linux Enterprise Server 15-LTSS typelib-1_0-JavaScriptCore-4_0 as a component of SUSE Linux Enterprise Server 15-LTSS typelib-1_0-WebKit2-4_0 as a component of SUSE Linux Enterprise Server 15-LTSS typelib-1_0-WebKit2WebExtension-4_0 as a component of SUSE Linux Enterprise Server 15-LTSS webkit2gtk-4_0-injected-bundles as a component of SUSE Linux Enterprise Server 15-LTSS webkit2gtk3-devel as a component of SUSE Linux Enterprise Server 15-LTSS webkit2gtk3 as a component of SUSE Linux Enterprise Server 15-LTSS webkit2gtk3 as a component of SUSE Linux Enterprise Server 16.0 libjavascriptcoregtk-4_0-18 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 libwebkit2gtk-4_0-37 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 libwebkit2gtk3-lang as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 typelib-1_0-JavaScriptCore-4_0 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 typelib-1_0-WebKit2-4_0 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 typelib-1_0-WebKit2WebExtension-4_0 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 webkit2gtk-4_0-injected-bundles as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 webkit2gtk3-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 webkit2gtk3 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 webkit2gtk3 as a component of SUSE Linux Enterprise Server for SAP applications 16.0 Use after free in Password Manager in Google Chrome prior to 143.0.7499.110 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium) CVE-2025-14372 SUSE Package Hub 15 SP6:chromedriver-143.0.7499.146-bp156.2.209.1 SUSE Package Hub 15 SP6:chromium-143.0.7499.146-bp156.2.209.1 openSUSE Leap 15.6:chromedriver-143.0.7499.146-bp156.2.209.1 openSUSE Leap 15.6:chromium-143.0.7499.146-bp156.2.209.1 openSUSE Leap 16.0:chromedriver-143.0.7499.40-bp160.1.1 openSUSE Leap 16.0:chromium-143.0.7499.40-bp160.1.1 openSUSE Tumbleweed:chromedriver-143.0.7499.109-1.1 openSUSE Tumbleweed:chromium-143.0.7499.109-1.1 important