CVE-2025-14174
high · 8.8Actively exploitedOn the CISA Known Exploited Vulnerabilities catalog
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Added 2025-12-12Remediation due 2026-01-02
Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)
8.8
CVSS
22.3%
EPSS (exploit prob.)
98th
EPSS percentile
2025-12-12
Published
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses
CWE-787CWE-119
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| chrome | >= 143.0.7499.41, < 143.0.7499.110 | |
| apple | macos | all versions |
| chrome | >= 143.0.7499.40, < 143.0.7499.109 | |
| linux | linux_kernel | all versions |
| microsoft | windows | all versions |
| chrome | <= 143.0.7499.40 | |
| apple | safari | < 26.2 |
| apple | ipados | < 18.7.3 |
| apple | ipados | >= 26.0, < 26.2 |
| apple | iphone_os | < 18.7.3 |
| apple | iphone_os | >= 26.0, < 26.2 |
| apple | macos | < 26.2 |
| apple | tvos | < 26.2 |
| apple | visionos | < 26.2 |
| apple | watchos | < 26.2 |
| microsoft | edge_chromium | < 143.0.3650.80 |
Check a specific version with /api/v1/cve/match.
References
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2025-14174