CVE-2025-14174

82

FAUCET Score

CVE-2025-14174 is a high-severity out-of-bounds memory access vulnerability in ANGLE within Google Chrome on Mac, affecting versions prior to 143.0.7499.110. This flaw allows a remote attacker to execute arbitrary code via a crafted HTML page, impacting Apple, Google, Linux, and Microsoft products. With a CVSS score of 8.8 (High), the vulnerability is easily exploitable over a network with low attack complexity, potentially leading to complete compromise of confidentiality, integrity, and availability. This zero-day vulnerability is actively exploited in the wild, as confirmed by its presence in the KEV catalog and extensive community discussion, including analysis of its use in sophisticated exploit chains targeting iOS Safari.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		>= 143.0.7499.41, < 143.0.7499.110CPE matchmatch criteria	cpe:2.3:a:google:chrome::::::::
		>= 143.0.7499.40, < 143.0.7499.109CPE matchmatch criteria	cpe:2.3:a:google:chrome::::::::
		<= 143.0.7499.40CPE matchmatch criteria	cpe:2.3:a:google:chrome::::::::
		< 26.2CPE matchmatch criteria	cpe:2.3:a:apple:safari::::::::
		< 18.7.3CPE matchmatch criteria	cpe:2.3:o:apple:ipados::::::::

CVSS Data

CVSS version used by this source: 3.1

8.8HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

Exploitability Score

2.8

Impact Score

5.9

CvssVersion

3.1

Exploit Intelligence

EPSS Score

22.72%

Probability of exploitation in next 30 days

EPSS Percentile

97.5%

Percentile rank of EPSS score among Peer Group

As of 2026-07-27

Model: v2026.06.15

Added to KEV · Dec 12, 2025

This CVE's current EPSS score of 0.2272 is in the 98th percentile among its peer group of 14,875 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.1 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (17)

microsoftpatch availablevia msrc

Product: Microsoft Edge (Chromium-based)Fixed in: 143.0.3650.80

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.2 Advanced Update SupportFixed in: webkit2gtk3-0:2.50.4-1.el8_2

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update SupportFixed in: webkit2gtk3-0:2.50.4-1.el8_4

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-OnFixed in: webkit2gtk3-0:2.50.4-1.el8_4

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update SupportFixed in: webkit2gtk3-0:2.50.4-1.el8_6

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.6 Telecommunications Update ServiceFixed in: webkit2gtk3-0:2.50.4-1.el8_6

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.6 Update Services for SAP SolutionsFixed in: webkit2gtk3-0:2.50.4-1.el8_6

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.8 Telecommunications Update ServiceFixed in: webkit2gtk3-0:2.50.4-1.el8_8

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8Fixed in: webkit2gtk3-0:2.50.4-1.el8_10

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9Fixed in: webkit2gtk3-0:2.50.4-1.el9_7

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9.0 Update Services for SAP SolutionsFixed in: webkit2gtk3-0:2.50.4-1.el9_0

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9.2 Update Services for SAP SolutionsFixed in: webkit2gtk3-0:2.50.4-1.el9_2

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9.4 Extended Update SupportFixed in: webkit2gtk3-0:2.50.4-1.el9_4

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9.6 Extended Update SupportFixed in: webkit2gtk3-0:2.50.4-1.el9_6

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.8 Update Services for SAP SolutionsFixed in: webkit2gtk3-0:2.50.4-1.el8_8

applevendor investigatingvia apple_support

redhatno patchvia redhat_api

Product: Red Hat Enterprise Linux 7Fixed in: webkitgtk4

Vendor Advisories (14)

redhatCVE-2025-14174Important

Google Chrome: chromium: webkitgtk: Out of bounds memory access via crafted HTML page

microsoft2025-Dec/CVE-2025-14174

Chromium: CVE-2025-14174 Out of bounds memory access in ANGLE

appleapple:126348LOW

About the security content of macOS Tahoe 26.3 - Apple Support

appleapple:126351

About the security content of tvOS 26.3 - Apple Support

appleapple:126352

About the security content of watchOS 26.3 - Apple Support

appleapple:126353

About the security content of visionOS 26.3 - Apple Support

appleapple:125884LOW

About the security content of iOS 26.2 and iPadOS 26.2 - Apple Support

appleapple:125885LOW

About the security content of iOS 18.7.3 and iPadOS 18.7.3 - Apple Support

appleapple:125886LOW

About the security content of macOS Tahoe 26.2 - Apple Support

appleapple:125889LOW

About the security content of tvOS 26.2 - Apple Support

appleapple:125890LOW

About the security content of watchOS 26.2 - Apple Support

appleapple:125891LOW

About the security content of visionOS 26.2 - Apple Support

appleapple:125892LOW

About the security content of Safari 26.2 - Apple Support

appleapple:126346

About the security content of iOS 26.3 and iPadOS 26.3 - Apple Support

References

learn.microsoft.com / en-us/deployedge/microsoft-edge-relnotes-security

Third Party Advisory

cisa.gov / known-exploited-vulnerabilities-catalog

Third Party Advisory

chromereleases.googleblog.com / 2025/12/stable-channel-update-for-desktop_10.html

Release Notes

issues.chromium.org / issues/466192044

Permissions Required