CVE-2025-14174

8.8

HIGH CVSS 3.1

Google Chromium Out of Bounds Memory Access Vulnerability - [Actively Exploited]

Overview

Description

Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)

Details

INFO

Published Date :

Dec. 12, 2025, 8:15 p.m.

Last Modified :

Dec. 15, 2025, 3:16 p.m.

Remotely Exploit :

Yes !

Source :

[email protected]

CISA Notification

CISA KEV (Known Exploited Vulnerabilities)

For the benefit of the cybersecurity community and network defenders—and to help every organization better manage vulnerabilities and keep pace with threat activity—CISA maintains the authoritative source of vulnerabilities that have been exploited in the wild.

Due Date: Jan 02, 2026

Alert Date: Dec 12, 2025 | 105 days ago

Description :

Google Chromium contains an out of bounds memory access vulnerability in ANGLE that could allow a remote attacker to perform out of bounds memory access via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

Required Action :

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Known Ransomware Campaign Use:

Unknown

Notes :

https://chromereleases.googleblog.com/2025/12/stable-channel-update-for-desktop_10.html ; https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security ; https://nvd.nist.gov/vuln/detail/CVE-2025-14174

Impact

Affected Products

The following products are affected by CVE-2025-14174 vulnerability. Even if cvefeed.io is aware of the exact versions of the products that are affected, the information is not represented in the table below.

ID	Vendor	Product
1	Apple	macos
2	Apple	iphone_os
3	Apple	tvos
4	Apple	watchos
5	Apple	safari
6	Apple	ipados
7	Apple	visionos
1	Microsoft	windows
2	Microsoft	edge_chromium
1	Linux	linux_kernel
1	Google	chrome

: Total Affected Vendor : 4 | Products : 11

Scoring

CVSS Scores

The Common Vulnerability Scoring System is a standardized framework for assessing the severity of vulnerabilities in software and systems. We collect and displays CVSS scores from various sources for each CVE.

Score	Version	Severity	Vector	Exploitability Score	Impact Score	Source
	CVSS 3.1	HIGH				134c704f-9b21-4f2e-91b3-4a467353bcc0

Solution

Update Google Chrome to patch out-of-bounds memory access vulnerability.

Update Google Chrome to version 143.0.7499.110 or later.
Apply vendor-provided security patches promptly.

Public PoC/Exploit Available at Github

CVE-2025-14174 has a 18 public PoC/Exploit available at Github. Go to the Public Exploits tab to see the list.

References

References to Advisories, Solutions, and Tools

Here, you will find a curated list of external links that provide in-depth information, practical solutions, and valuable tools related to CVE-2025-14174.

URL	Resource
https://chromereleases.googleblog.com/2025/12/stable-channel-update-for-desktop_10.html	Release Notes
https://issues.chromium.org/issues/466192044	Permissions Required
https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security	Third Party Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-14174	Third Party Advisory

CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorizes the common flaws or weaknesses that can lead to vulnerabilities. CVE-2025-14174 is associated with the following CWEs:

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-787: Out-of-bounds Write

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2025-14174 weaknesses.

CAPEC-8: Buffer Overflow in an API Call Buffer Overflow in an API Call CAPEC-9: Buffer Overflow in Local Command-Line Utilities Buffer Overflow in Local Command-Line Utilities CAPEC-10: Buffer Overflow via Environment Variables Buffer Overflow via Environment Variables CAPEC-14: Client-side Injection-induced Buffer Overflow Client-side Injection-induced Buffer Overflow CAPEC-24: Filter Failure through Buffer Overflow Filter Failure through Buffer Overflow CAPEC-42: MIME Conversion MIME Conversion CAPEC-44: Overflow Binary Resource File Overflow Binary Resource File CAPEC-45: Buffer Overflow via Symbolic Links Buffer Overflow via Symbolic Links CAPEC-46: Overflow Variables and Tags Overflow Variables and Tags CAPEC-47: Buffer Overflow via Parameter Expansion Buffer Overflow via Parameter Expansion CAPEC-100: Overflow Buffers Overflow Buffers CAPEC-123: Buffer Manipulation Buffer Manipulation

We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).

polarityio/rq

Polarity - RQ integration to query CVEs and get back exposure information on assets.

JavaScript Less Handlebars

Updated: 1 week, 2 days ago

0 stars 0 fork 0 watcher

Born at : March 16, 2026, 10:03 p.m. This repo has been linked 1 different CVEs too.

sundenovak/CVE-2026-20700-An-analysis-WIP

[WORK IN PROGRESS] My analysis of CVE-2026-20700

Updated: 1 month ago

2 stars 0 fork 0 watcher

Born at : Feb. 18, 2026, 12:27 p.m. This repo has been linked 3 different CVEs too.

George0Papasotiriou/CVE-2025-14174-Chrome-Zero-Day

None

JavaScript HTML

Updated: 1 month, 2 weeks ago

1 stars 0 fork 0 watcher

Born at : Feb. 10, 2026, 12:26 a.m. This repo has been linked 1 different CVEs too.

lucacapacci/PoC-in-GitHub

Mirror of https://github.com/nomi-sec/PoC-in-GitHub

Updated: 1 month, 2 weeks ago

0 stars 0 fork 0 watcher

Born at : Feb. 7, 2026, 10:02 a.m. This repo has been linked 789 different CVEs too.

SimoesCTT/SCTT-2026-33-PAC-Speculative-PAC-Oracle

SCTT-2026-33-PAC is the first operational Speculative PAC Oracle based on Convergent Time Theory (CTT). While Apple's Pointer Authentication (PAC) on the M1–M3 and A14+ chips uses cryptographic signatures to ensure pointer integrity, this exploit leverages Theorem 4.2 to bypass

Python

Updated: 1 month, 3 weeks ago

0 stars 0 fork 0 watcher

Born at : Feb. 1, 2026, 3:11 p.m. This repo has been linked 2 different CVEs too.

SimoesCTT/CTT-Apple-Silicon-Refraction

webkit_refraction.js (The 33-Layer WebGL Payload) This JavaScript payload uses the \alpha constant to create a high-frequency "Memory Shiver." It induces the Use-After-Free (UAF) in CVE-2025-43529 by desynchronizing the WebKit garbage collector from the GPU's Metal command buffer.

JavaScript

Updated: 1 month, 3 weeks ago

0 stars 1 fork 1 watcher

Born at : Jan. 30, 2026, 10:48 a.m. This repo has been linked 2 different CVEs too.

0xcrypto/apple-cves

None

Python

Updated: 1 week, 5 days ago

0 stars 0 fork 0 watcher

Born at : Jan. 26, 2026, 8:17 a.m. This repo has been linked 2857 different CVEs too.

sakyu7/sakyu7.github.io

🔍 Analyze WebKit and ANGLE vulnerabilities with this repository for CVE-2025-43529 and CVE-2025-14174, focusing on verified components and ongoing efforts.

Updated: 1 month ago

0 stars 0 fork 0 watcher

Born at : Jan. 26, 2026, 1:09 a.m. This repo has been linked 2 different CVEs too.

sakyu7/WebKit-UAF-ANGLE-OOB-Analysis

🛠️ Analyze WebKit UAF vulnerabilities on iOS 26.1 with this ongoing project, tracking verified pieces and failures in the ANGLE exploit chain.

blog-engine css documentation-tool erp github-pages go hacktoberfest javascript netlify odoo open-science page-builder rmarkdown static-site-generator svelte website-builder

HTML

Updated: 5 days, 17 hours ago

0 stars 0 fork 0 watcher

Born at : Jan. 26, 2026, 12:59 a.m. This repo has been linked 2 different CVEs too.

SgtBattenHA/Analysis

Analysis of CVE-2025-43529 (WebKit UAF) + CVE-2025-14174 (ANGLE OOB) exploit chain - iOS Safari

PHP CSS HTML

Updated: 1 month, 3 weeks ago

0 stars 0 fork 0 watcher

Born at : Jan. 20, 2026, 12:19 p.m. This repo has been linked 2 different CVEs too.

zeroxjf/WebKit-UAF-ANGLE-OOB-Analysis

Analysis of CVE-2025-43529 (WebKit UAF) + CVE-2025-14174 (ANGLE OOB) exploit chain - iOS Safari

HTML

Updated: 2 days, 1 hour ago

92 stars 18 fork 18 watcher

Born at : Jan. 13, 2026, 4:35 a.m. This repo has been linked 2 different CVEs too.

zeroxjf/CVE-2025-14174-analysis

Analysis and PoC for CVE-2025-14174 - ANGLE Metal OOB write (iOS Safari, macOS Chrome)

HTML

Updated: 2 months, 2 weeks ago

14 stars 1 fork 1 watcher

Born at : Jan. 2, 2026, 3:21 p.m. This repo has been linked 2 different CVEs too.

tralsesec/AnatomyOfABug

Full Breakdown of CVEs & more.

Updated: 3 months ago

0 stars 0 fork 0 watcher

Born at : Dec. 25, 2025, 8:17 a.m. This repo has been linked 9 different CVEs too.

Satirush/CVE-2025-14174-Poc

Proof-of-Concept exploit for CVE-2025-14174 (EUVD-2025-203113) - Memory corruption in ANGLE allowing out-of-bounds access and RCE in web browsers. Reliable on iOS/Android/Windows, including patched systems with incomplete fixes.

Updated: 3 months, 1 week ago

0 stars 0 fork 0 watcher

Born at : Dec. 18, 2025, 11:58 a.m. This repo has been linked 1 different CVEs too.

Terrasue/CVE-2025-14174-Exploit

Proof-of-Concept exploit for CVE-2025-14174 (EUVD-2025-203113) - Memory corruption in ANGLE

Updated: 3 months, 1 week ago

1 stars 0 fork 0 watcher

Born at : Dec. 14, 2025, 2:46 p.m. This repo has been linked 1 different CVEs too.

Results are limited to the first 15 repositories due to potential performance issues.

The following list is the news that have been mention CVE-2025-14174 vulnerability anywhere in the article.

CybersecurityNews

DarkSword Exploit Chain That Can Hack Millions of iPhones Leaked Online

A powerful iOS exploit toolkit known as DarkSword has been publicly leaked on GitHub, dramatically lowering the barrier for cybercriminals to target hundreds of millions of iPhones and iPads still run ...

Published Date: Mar 24, 2026 (3 days, 3 hours ago)

security.nl

Exploitkit voor het hacken van kwetsbare iPhones gepubliceerd op internet

Een exploitkit voor het hacken van kwetsbare iPhones is gepubliceerd op internet, wat de kans op grootschalig misbruik vergroot. Vorige week waarschuwden Google, Lookout en iVerify voor een exploitkit ...

Published Date: Mar 24, 2026 (3 days, 4 hours ago)

Daily CyberSecurity

Unmasking DarkSword: GTIG Exposes Full-Chain iOS Exploit Used by Global Spies

Timeline of DarkSword observations and vulnerability patches | Image: GTIG In a comprehensive technical disclosure, the Google Threat Intelligence Group (GTIG) has revealed the existence of a highly s ...

Published Date: Mar 22, 2026 (5 days, 1 hour ago)

SentinelOne

The Good, the Bad and the Ugly in Cybersecurity – Week 12

The Good | Operation Synergia III Disrupts Malicious Networks & the EU Sanctions State-Sponsored Attackers Operation Synergia III, an Interpol-led crackdown spanning July 2025 to January 2026, has dis ...

Published Date: Mar 20, 2026 (1 week ago)

Help Net Security

DarkSword: Researchers uncover another iOS exploit kit

A powerful iPhone hacking toolkit dubbed “DarkSword” has been used since November 2025 to compromise devices by exploiting zero-day iOS vulnerabilities, Google researchers have shared. iOS vulnerabili ...

Published Date: Mar 19, 2026 (1 week, 1 day ago)

The Hacker News

DarkSword iOS Exploit Kit Uses 6 Flaws, 3 Zero-Days for Full Device Takeover

A new exploit kit for Apple iOS devices designed to steal sensitive data from is being wielded by multiple threat actors since at least November 2025, according to reports from Google Threat Intellige ...

Published Date: Mar 19, 2026 (1 week, 1 day ago)

The Register

State snoops and spyware vendors planting info-stealing malware on iPhones, Google warns

A new exploit kit targeting iPhone users and stealing their sensitive data is being abused by "multiple" spyware vendors and suspected nation-state goons, security researchers said on Wednesday. The e ...

Published Date: Mar 18, 2026 (1 week, 1 day ago)

CybersecurityNews

New iOS Exploit With Advanced iPhone Hacking Tools Attacking Users to Steal Personal Data

DarkSword iOS Exploit A sophisticated full-chain iOS exploit kit dubbed DarkSword, actively deployed by multiple commercial surveillance vendors and state-sponsored threat actors since at least Novemb ...

Published Date: Mar 18, 2026 (1 week, 1 day ago)

security.nl

Onderzoekers ontdekken iOS-exploit gebruikt om iPhones te infecteren

Onderzoekers hebben een iOS-exploit ontdekt die sinds eind vorig jaar door meerdere actoren is gebruikt om iPhones bij gerichte aanvallen met malware te infecteren. Afhankelijk van de betreffende acto ...

Published Date: Mar 18, 2026 (1 week, 2 days ago)

Google Cloud

The Proliferation of DarkSword: iOS Exploit Chain Adopted by Multiple Threat Actors

Introduction Google Threat Intelligence Group (GTIG) has identified a new iOS full-chain exploit that leveraged multiple zero-day vulnerabilities to fully compromise devices. Based on toolmarks in rec ...

Published Date: Mar 18, 2026 (1 week, 2 days ago)

Google Cloud

Look What You Made Us Patch: 2025 Zero-Days in Review

Written by: Casey Charrier, James Sadowski, Zander Work, Clement Lecigne, Benoît Sevens, Fred Plan Executive Summary Google Threat Intelligence Group (GTIG) tracked 90 zero-day vulnerabilities exploit ...

Published Date: Mar 05, 2026 (3 weeks, 1 day ago)

The Register

Apple patches decade-old iOS zero-day, possibly exploited by commercial spyware

Apple patched a zero-day vulnerability affecting every iOS version since 1.0, used in what the company calls an "extremely sophisticated attack" against targeted individuals. CVE-2026-20700, discovere ...