{"id":"CVE-2025-14174","title":"Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page","summary":"Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)","severity":"high","cvss":8.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-787","CWE-119"],"vendor":"google","product":"chrome","affected":["chrome >= 143.0.7499.41, < 143.0.7499.110","chrome >= 143.0.7499.40, < 143.0.7499.109","chrome <= 143.0.7499.40","safari < 26.2","ipados < 18.7.3","ipados >= 26.0, < 26.2","iphone_os < 18.7.3","iphone_os >= 26.0, < 26.2","macos < 26.2","tvos < 26.2","visionos < 26.2","watchos < 26.2","edge_chromium < 143.0.3650.80"],"patched":["chrome 143.0.7499.109","safari 26.2","ipados 26.2","iphone_os 26.2","macos 26.2","tvos 26.2","visionos 26.2","watchos 26.2","edge_chromium 143.0.3650.80"],"published":"2025-12-12","updated":"2026-10-07","sourceUpdated":"2026-10-07T20:10:01.970","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-14174","references":[{"url":"https://chromereleases.googleblog.com/2025/12/stable-channel-update-for-desktop_10.html","label":"chrome-cve-admin@google.com"},{"url":"https://issues.chromium.org/issues/466192044","label":"chrome-cve-admin@google.com"},{"url":"https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-14174","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"tags":["nvd","kev","in-the-wild","exploit-available","cve.org"],"epss":0.55334,"epssPercentile":0.99026,"kev":true,"kevDateAdded":"2025-12-12","kevDueDate":"2026-01-02","kevRansomware":false,"exploited":true,"exploits":{"github":3,"githubRepos":["https://github.com/Satirush/CVE-2025-14174-Poc","https://github.com/typeconfused/CVE-2025-14174-analysis","https://github.com/George0Papasotiriou/CVE-2025-14174-Chrome-Zero-Day"],"checkedAt":"2026-10-27T16:45:13.224Z"},"exploitAvailable":true,"zeroDay":true,"ssvc":{"exploitation":"active","automatable":"no","technicalImpact":"total","timestamp":"2025-12-16T04:55:55.101177Z"},"ingestedAt":"2026-09-21T13:37:22.847Z","slug":"CVE-2025-14174","body":"## Overview\n\nOut of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)\n\n## Affected\n\n- `chrome >= 143.0.7499.41, < 143.0.7499.110`\n- `chrome >= 143.0.7499.40, < 143.0.7499.109`\n- `chrome <= 143.0.7499.40`\n- `safari < 26.2`\n- `ipados < 18.7.3`\n- `ipados >= 26.0, < 26.2`\n- `iphone_os < 18.7.3`\n- `iphone_os >= 26.0, < 26.2`\n- `macos < 26.2`\n- `tvos < 26.2`\n- `visionos < 26.2`\n- `watchos < 26.2`\n- `edge_chromium < 143.0.3650.80`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `chrome 143.0.7499.109`\n- `safari 26.2`\n- `ipados 26.2`\n- `iphone_os 26.2`\n- `macos 26.2`\n- `tvos 26.2`\n- `visionos 26.2`\n- `watchos 26.2`\n- `edge_chromium 143.0.3650.80`","depth":"abyssal","depthScore":84,"depthScoreParts":{"impact":48.4,"likelihood":11.1,"exploitation":25,"ransomware":0},"changes":[{"seq":229806,"id":"CVE-2025-14174","ts":1793065254685,"field":"epss","old":"0.22327","new":"0.55334"}]}