Search/CVE-2025-14174
● CVE — High

CVE-2025-14174

Vendorapple, google, microsoftProductmacos, chrome, iphone os, tvos, watchos, safari, ipados, edge chromium, visionosDiscoveredDec 12, 2025UpdatedOct 7, 2026

Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)

View graph Watch Export
CVSS v3.1
8.8 HIGH
EPSS
55.3%
probability of exploitation in 30 days
CISA KEV
Listed
confirmed active exploitation
News coverage
3
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Aug 16, 2026 → Oct 26, 2026
▲ 32.7pp
22.6% → 55.3% over 3 tracked changes
CVSS v3.1 Detail
Attack VectorNETWORK
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionREQUIRED
ScopeUNCHANGED
ConfidentialityHIGH
IntegrityHIGH
AvailabilityHIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Connections
15 relationships
Timeline
disclosure → media coverage
Dec 12, 2025
Disclosure — published as a CVE record. · last revised by NVD Oct 7, 2026
Dec 13, 2025
acn.gov.it reports: Apple: rilevato sfruttamento attivo di vulnerabilità in WebKit
Dec 15, 2025
helpnetsecurity.com reports: Update your Apple devices to fix actively exploited vulnerabilities! (CVE-2025-14174, CVE-2025-43529)
Sep 29, 2026
bleepingcomputer.com reports: Apple patches CoreGraphics zero-day flaw exploited in attacks
Public PoC (3)
github.com/Satirush/CVE-2025-14174-Pocgithub.com/typeconfused/CVE-2025-14174-analysisgithub.com/George0Papasotiriou/CVE-2025-14174-Chrome-Zero-Day
Unverified third-party code — review before executing.