High severity8.8CISA KEVNVD Advisory· Published Dec 12, 2025· Updated Jun 17, 2026

CVE-2025-14174

Description

Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)

Affected products

Apple Inc./Safari
cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*
Range: <26.2
Google/Chrome3 versions
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*range: >=143.0.7499.41,<143.0.7499.110
- (no CPE)range: <143.0.7499.110
- (no CPE)range: 143.0.7499.110
Microsoft/Edge Chromium
cpe:2.3:a:microsoft:edge_chromium:*:*:*:*:*:*:*:*
Range: <143.0.3650.80
Apple Inc./Ipados
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
Range: <18.7.3
Apple Inc./Iphone OS
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
Range: <18.7.3
Apple Inc./macOS
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
Range: <26.2
Apple Inc./tvOS
cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*
Range: <26.2
Apple Inc./Visionos
cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*
Range: <26.2
Apple Inc./watchOS
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*
Range: <26.2
osv-coords62 versions
pkg:apk/chainguard/chromium pkg:apk/chainguard/chromium-docker-selenium-compat pkg:apk/chainguard/chromium-lang pkg:apk/chainguard/chromium-qt pkg:apk/wolfi/chromium pkg:apk/wolfi/chromium-docker-selenium-compat pkg:apk/wolfi/chromium-lang pkg:apk/wolfi/chromium-qt pkg:rpm/opensuse/chromium&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/chromium&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/webkit2gtk3&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/webkit2gtk3&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/webkit2gtk3-soup2&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/webkit2gtk3-soup2&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/webkit2gtk4&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/webkit2gtk4&distro=openSUSE%20Leap%2016.0 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOS pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSS pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-ESPOS pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-LTSS pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP6 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP7 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5-LTSS pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSS pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP5-LTSS pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP6-LTSS pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2016.0 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%20LTSS%20Extended%20Security%2012%20SP5 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP5 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP6 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20applications%2016.0 pkg:rpm/suse/webkit2gtk3-soup2&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOS pkg:rpm/suse/webkit2gtk3-soup2&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSS pkg:rpm/suse/webkit2gtk3-soup2&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-ESPOS pkg:rpm/suse/webkit2gtk3-soup2&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-LTSS pkg:rpm/suse/webkit2gtk3-soup2&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP6 pkg:rpm/suse/webkit2gtk3-soup2&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP7 pkg:rpm/suse/webkit2gtk3-soup2&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSS pkg:rpm/suse/webkit2gtk3-soup2&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP5-LTSS pkg:rpm/suse/webkit2gtk3-soup2&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP6-LTSS pkg:rpm/suse/webkit2gtk3-soup2&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4 pkg:rpm/suse/webkit2gtk3-soup2&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP5 pkg:rpm/suse/webkit2gtk3-soup2&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP6 pkg:rpm/suse/webkit2gtk3-soup2&distro=SUSE%20Manager%20Proxy%20LTS%204.3 pkg:rpm/suse/webkit2gtk3-soup2&distro=SUSE%20Manager%20Server%20LTS%204.3 pkg:rpm/suse/webkit2gtk4&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOS pkg:rpm/suse/webkit2gtk4&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSS pkg:rpm/suse/webkit2gtk4&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-ESPOS pkg:rpm/suse/webkit2gtk4&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-LTSS pkg:rpm/suse/webkit2gtk4&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP6 pkg:rpm/suse/webkit2gtk4&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP7 pkg:rpm/suse/webkit2gtk4&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP6 pkg:rpm/suse/webkit2gtk4&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP7 pkg:rpm/suse/webkit2gtk4&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSS pkg:rpm/suse/webkit2gtk4&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP5-LTSS pkg:rpm/suse/webkit2gtk4&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP6-LTSS pkg:rpm/suse/webkit2gtk4&distro=SUSE%20Linux%20Enterprise%20Server%2016.0 pkg:rpm/suse/webkit2gtk4&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4 pkg:rpm/suse/webkit2gtk4&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP5 pkg:rpm/suse/webkit2gtk4&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP6 pkg:rpm/suse/webkit2gtk4&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20applications%2016.0
< 143.0.7499.169-r0+ 61 more
- (no CPE)range: < 143.0.7499.169-r0
- (no CPE)range: < 143.0.7499.169-r0
- (no CPE)range: < 143.0.7499.169-r0
- (no CPE)range: < 143.0.7499.169-r0
- (no CPE)range: < 143.0.7499.169-r0
- (no CPE)range: < 143.0.7499.169-r0
- (no CPE)range: < 143.0.7499.169-r0
- (no CPE)range: < 143.0.7499.169-r0
- (no CPE)range: < 143.0.7499.146-bp160.1.1
- (no CPE)range: < 143.0.7499.146-1.1
- (no CPE)range: < 2.50.4-150600.12.54.1
- (no CPE)range: < 2.50.4-160000.1.1
- (no CPE)range: < 2.50.4-150600.12.54.1
- (no CPE)range: < 2.50.4-160000.1.1
- (no CPE)range: < 2.50.4-150600.12.54.1
- (no CPE)range: < 2.50.4-160000.1.1
- (no CPE)range: < 2.50.4-150400.4.134.2
- (no CPE)range: < 2.50.4-150400.4.134.2
- (no CPE)range: < 2.50.4-150400.4.134.2
- (no CPE)range: < 2.50.4-150400.4.134.2
- (no CPE)range: < 2.50.4-150600.12.54.1
- (no CPE)range: < 2.50.4-150600.12.54.1
- (no CPE)range: < 2.50.4-4.51.1
- (no CPE)range: < 2.50.4-150400.4.134.2
- (no CPE)range: < 2.50.4-150400.4.134.2
- (no CPE)range: < 2.50.4-150600.12.54.1
- (no CPE)range: < 2.50.4-160000.1.1
- (no CPE)range: < 2.50.4-4.51.1
- (no CPE)range: < 2.50.4-150400.4.134.2
- (no CPE)range: < 2.50.4-150400.4.134.2
- (no CPE)range: < 2.50.4-150600.12.54.1
- (no CPE)range: < 2.50.4-160000.1.1
- (no CPE)range: < 2.50.4-150400.4.134.1
- (no CPE)range: < 2.50.4-150400.4.134.1
- (no CPE)range: < 2.50.4-150400.4.134.1
- (no CPE)range: < 2.50.4-150400.4.134.1
- (no CPE)range: < 2.50.4-150600.12.54.1
- (no CPE)range: < 2.50.4-150600.12.54.1
- (no CPE)range: < 2.50.4-150400.4.134.1
- (no CPE)range: < 2.50.4-150400.4.134.1
- (no CPE)range: < 2.50.4-150600.12.54.1
- (no CPE)range: < 2.50.4-150400.4.134.1
- (no CPE)range: < 2.50.4-150400.4.134.1
- (no CPE)range: < 2.50.4-150600.12.54.1
- (no CPE)range: < 2.50.4-150400.4.134.1
- (no CPE)range: < 2.50.4-150400.4.134.1
- (no CPE)range: < 2.50.4-150400.4.134.2
- (no CPE)range: < 2.50.4-150400.4.134.2
- (no CPE)range: < 2.50.4-150400.4.134.2
- (no CPE)range: < 2.50.4-150400.4.134.2
- (no CPE)range: < 2.50.4-150600.12.54.1
- (no CPE)range: < 2.50.4-150600.12.54.1
- (no CPE)range: < 2.50.4-150600.12.54.1
- (no CPE)range: < 2.50.4-150600.12.54.1
- (no CPE)range: < 2.50.4-150400.4.134.2
- (no CPE)range: < 2.50.4-150400.4.134.2
- (no CPE)range: < 2.50.4-150600.12.54.1
- (no CPE)range: < 2.50.4-160000.1.1
- (no CPE)range: < 2.50.4-150400.4.134.2
- (no CPE)range: < 2.50.4-150400.4.134.2
- (no CPE)range: < 2.50.4-150600.12.54.1
- (no CPE)range: < 2.50.4-160000.1.1

Patches

Vulnerability mechanics

References

learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-securitynvdThird Party Advisory
www.cisa.gov/known-exploited-vulnerabilities-catalognvdThird Party Advisory
chromereleases.googleblog.com/2025/12/stable-channel-update-for-desktop_10.htmlnvdRelease Notes
issues.chromium.org/issues/466192044nvdPermissions Required

News mentions

Coruna, DarkSword iOS Exploits Proliferate Globally
Dark Reading · Aug 10, 2026
The Proliferation of DarkSword: iOS Exploit Chain Adopted by Multiple Threat Actors
Mandiant Threat Intelligence · Mar 18, 2026

cvss	0.572
epss	0.018
exploit	0.000
kev	0.120
patch	0.000
ransomware	0.000