CVE-2025-14174: Google Chrome ANGLE out-of-bounds memory access on Mac

Automated analysis

Generated by VULONE's analysis model from the NVD record, CISA KEV and EPSS data on 17 September 2026. Confidence: high.

critical priorityIt is in CISA KEV with confirmed exploitation, a high CVSS score of 8.8, and a near-top EPSS percentile, making it an urgent patch target.

What it is

Chrome on macOS before 143.0.7499.110 contains an out-of-bounds memory access in the ANGLE graphics layer, classified as an out-of-bounds write (CWE-787) and memory buffer overflow (CWE-119). A remote attacker can trigger it with a crafted HTML page, and CISA added it to the Known Exploited Vulnerabilities catalog on 2025-12-12, indicating real-world exploitation.

Impact

Successful exploitation gives an attacker out-of-bounds memory access with high confidentiality, integrity and availability impact under the CVSS vector, which in a browser context typically means code execution or memory corruption in the renderer.

Attack surface

Reached over the network through a crafted HTML page rendered in Chrome on Mac; the CVSS vector requires user interaction (UI:R) and no privileges (PR:N), so a victim must open or be directed to the page.

Exploitation

Listed in CISA KEV with a remediation due date of 2026-01-02, and EPSS shows a 30-day probability of 0.22327 (97.6th percentile), so exploitation is confirmed and expected to continue.

What to do

• Update Google Chrome on macOS to 143.0.7499.110 or later, and apply the corresponding Chromium-based Edge and Safari/WebKit updates from their vendors.
• Follow CISA KEV required action and BOD 22-01 guidance for cloud services, or discontinue use of the affected product where no mitigation exists.
• Enforce automatic browser updates and verify installed versions across managed Mac fleets.
• Restrict or monitor browsing to untrusted sites and block known malicious domains at the network layer.
• Track the Chromium issue 466192044 and vendor release notes for any follow-up fixes.

Detection

• Monitor for Chrome renderer crashes or ANGLE/graphics-related crash reports on macOS endpoints, which can indicate exploitation attempts.
• Hunt for Chrome processes spawning unexpected child processes or making anomalous network connections after page loads.
• Review proxy and DNS logs for access to newly registered or low-reputation domains consistent with exploit delivery.
• Check endpoint telemetry for memory corruption indicators or unusual code execution in browser processes.

This assessment is produced automatically and is not human-reviewed. Verify against the vendor advisory before acting on it.