CVE-2025-14174 Microsoft — Exploit & Vulnerability Details HIGH

Parameter	Value
CVSS	8.8 (HIGH)
Affected Versions	143.0.7499.40 — 26.2
Fixed In	143.0.7499.110
Type	CWE-787 (Out-of-bounds Write), CWE-119 (Buffer Overflow)
Vendor	Microsoft
Public PoC	Yes

Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)

Attack Parameters

Attack Vector

Network

Can be exploited remotely

Attack Complexity

Low

Easy to exploit

Privileges Required

None

No privileges needed

User Interaction

Required

User action required

Impact Assessment

Confidentiality

High

Complete data leak

Integrity

High

Complete data modification

Availability

High

Complete denial of service

CVSS Vector v3.1

Weakness Type (CWE)

CWE-787 Out-of-bounds Write

CWE-119 Buffer Overflow

Vulnerable Products 16

Configuration	From (including)	Up to (excluding)
Google Chrome cpe:2.3:a:google:chrome::::::::	`143.0.7499.41`	`143.0.7499.110`
Apple Macos cpe:2.3:o:apple:macos:-:::::::*	—	—
Google Chrome cpe:2.3:a:google:chrome::::::::	`143.0.7499.40`	`143.0.7499.109`
Linux Linux_Kernel cpe:2.3:o:linux:linux_kernel:-:::::::*	—	—
Microsoft Windows cpe:2.3:o:microsoft:windows:-:::::::*	—	—
Google Chrome cpe:2.3:a:google:chrome::::::::	—	`<= 143.0.7499.40`
Apple Safari cpe:2.3:a:apple:safari::::::::	—	`26.2`
Apple Ipados cpe:2.3:o:apple:ipados::::::::	—	`18.7.3`
Apple Ipados cpe:2.3:o:apple:ipados::::::::	`26.0`	`26.2`
Apple Iphone_Os cpe:2.3:o:apple:iphone_os::::::::	—	`18.7.3`
Apple Iphone_Os cpe:2.3:o:apple:iphone_os::::::::	`26.0`	`26.2`
Apple Macos cpe:2.3:o:apple:macos::::::::	—	`26.2`
Apple Tvos cpe:2.3:o:apple:tvos::::::::	—	`26.2`
Apple Visionos cpe:2.3:o:apple:visionos::::::::	—	`26.2`
Apple Watchos cpe:2.3:o:apple:watchos::::::::	—	`26.2`
Microsoft Edge_Chromium cpe:2.3:a:microsoft:edge_chromium::::::::	—	`143.0.3650.80`