Google Chromium Out of Bounds Memory Access Vulnerability

HIGH 8.8EXPLOITED (CISA KEV)CVE-2025-14174 · Published 12/12/2025 · updated 07/10/2026

Google Chromium Out of Bounds Memory Access Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 12/12/2025. Patch affected systems as an emergency.

Package	Affected versions	Patched versions
safari apple	`< 26.2`	`26.2`
chrome google	`≥ 143.0.7499.40, < 143.0.7499.109≥ 143.0.7499.41, < 143.0.7499.110≤ 143.0.7499.40`	`143.0.7499.109143.0.7499.110`
edge chromium microsoft	`< 143.0.3650.80`	`143.0.3650.80`

Description

Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)

References

chromereleases.googleblog.com/2025/12/stable-channel-update-for-desktop_10.html · Release Notes
issues.chromium.org/issues/466192044 · Permissions Required
learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security · Third Party Advisory
cisa.gov/known-exploited-vulnerabilities-catalog · Third Party Advisory
CISA KEV · CVE-2025-14174

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free