Page generated: 09 Nov 2026, 09:02 UTC
← Dashboard

CVE-2025-14174

Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)

CVSS 8.8 (HIGH) KEV: KNOWN CATALOG

Attention and evidence

HYPE SCORE
0.0/10
REALITY · THREAT PRIORITY
8.6/10
General review priority; not probability

Evidence confidence: Exploitation recorded

Why this priority?
  • Recorded exploitation baseline: +7.00
  • Technical severity: CVSS 8.8: +1.32
  • Fresh EPSS: 55.33%: +0.28

General review priority, not probability, victim count or asset-specific risk. A range covers missing CVSS/EPSS inputs within the current evidence state.

Sources: 28 documents and public datasets.

Hype components

Headline sample (25%)
0/100
Press, 30 days (60%)
0/100
Grounded branding (15%)
0/100
HYPE TOTAL0/100

Sources and documents

The Hacker News
Press · 19 Mar 2026, 07:00 · DarkSword iOS Exploit Kit Uses 6 Flaws, 3 Zero-Days for Full Device Takeover - The Hacker News
Rescana
Press · 18 Mar 2026, 16:05 · Apple Urgent Security Update: CVE-2025-14174 WebKit Same-Origin Policy Bypass Vulnerability Impacts iOS, macOS, Chrome, and Edge - Rescana
Lookout
Press · 19 Feb 2026, 08:00 · MultiApp-CVE-2025-14765 | Threat Intel - Lookout
Help Net Security
Press · 12 Feb 2026, 08:00 · Apple fixes zero-day flaw exploited in targeted attacks (CVE-2026-20700) - Help Net Security
Security Affairs
Press · 12 Feb 2026, 08:00 · Apple fixed first actively exploited zero-day in 2026 - Security Affairs
See all 28 source documents
The Hacker News
Press · 12 Feb 2026, 08:00 · Apple Fixes Exploited Zero-Day Affecting iOS, macOS, and Other Devices - The Hacker News
SOC Prime
Press · 12 Feb 2026, 08:00 · CVE-2026-20700: Apple Patches Zero-Day Exploited in Sophisticated Cyber Attacks - SOC Prime
TechRepublic
Press · 20 Jan 2026, 08:00 · New iOS and iPadOS Flaws Leave Millions of iPhones at Risk - TechRepublic
Recorded Future
Press · 13 Jan 2026, 08:00 · December 2025 CVE Landscape: 22 Critical Vulnerabilities Mark 120% Surge, React2Shell Dominates Threat Activity - Recorded Future
Cyber Magazine
Press · 12 Jan 2026, 08:00 · How iOS 26.2 Fixes Huge Cyber Flaws & Thwarts iPhone Spyware - Cyber Magazine
Help Net Security
Press · 09 Jan 2026, 08:00 · January 2026 Patch Tuesday forecast: And so it continues - Help Net Security
New York Post
Press · 28 Dec 2025, 08:00 · Apple patches two zero-day flaws used in targeted attacks - New York Post
SOCRadar
Press · 17 Dec 2025, 08:00 · CVE-2025-43529 & CVE-2025-14174: Apple and Google’s Zero-Day Patches - SOCRadar
SOC Prime
Press · 16 Dec 2025, 08:00 · CVE-2025-14174 Vulnerability: A New Memory Corruption Zero-Day Vulnerability in Apple WebKit Exploited in Targeted Attacks - SOC Prime
Check Point Research
Press · 15 Dec 2025, 08:00 · 15th December – Threat Intelligence Report - Check Point Research
Hong Kong Computer Emergency Response Team Coordination Centre
Press · 15 Dec 2025, 08:00 · Apple Products Multiple Vulnerabilities - Hong Kong Computer Emergency Response Team Coordination Centre
Help Net Security
Press · 15 Dec 2025, 08:00 · Update your Apple devices to fix actively exploited vulnerabilities! (CVE-2025-14174, CVE-2025-43529) - Help Net Security
SecurityWeek
Press · 15 Dec 2025, 08:00 · Apple Patches Two Zero-Days Tied to Mysterious Exploited Chrome Flaw - SecurityWeek
Dark Reading
Press · 15 Dec 2025, 08:00 · Apple Patches More Zero-Days Used in 'Sophisticated' Attack - Dark Reading
LinkedIn
Press · 14 Dec 2025, 08:00 · Apple Releases Emergency Patch For Two Zero-Day Flaws Used In Highly Targeted Attacks - LinkedIn
Rescana
Press · 14 Dec 2025, 08:00 · Apple Urgently Patches WebKit Zero-Day Vulnerabilities Exploited in Targeted Attacks Affecting iOS, macOS, and Safari - Rescana
CyberSecurityNews
Press · 13 Dec 2025, 08:00 · Apple 0-Day Vulnerabilities Exploited in Sophisticated Attacks Targeting iPhone Users - CyberSecurityNews
The Hacker News
Press · 13 Dec 2025, 08:00 · Apple Issues Security Updates After Two WebKit Flaws Found Exploited in the Wild - The Hacker News
BleepingComputer
Press · 12 Dec 2025, 08:00 · Apple fixes two zero-day flaws exploited in 'sophisticated' attacks - BleepingComputer
Hong Kong Computer Emergency Response Team Coordination Centre
Press · 12 Dec 2025, 08:00 · Microsoft Edge Multiple Vulnerabilities - Hong Kong Computer Emergency Response Team Coordination Centre
BleepingComputer
Press · 11 Dec 2025, 08:00 · Google fixes eighth Chrome zero-day exploited in attacks in 2025 - BleepingComputer
The Hacker News
Press · 11 Dec 2025, 08:00 · Chrome Targeted by Active In-the-Wild Exploit Tied to Undisclosed High-Severity Flaw - The Hacker News
Hong Kong Computer Emergency Response Team Coordination Centre
Press · 11 Dec 2025, 08:00 · Google Chrome Multiple Vulnerabilities - Hong Kong Computer Emergency Response Team Coordination Centre

Score evolution

● Hype   ● Reality

Earlier evidence-support scores are retained in history; this chart shows only the current priority definition.

First record: hype 0.0 · reality 8.6 (2026-11-02 15:13). The curve appears once the score changes.

Public exploit evidence

2

Public exploit entries / repo candidates

See 2 repos with metrics
RepositoryStarsForksLanguageUpdated
Satirush/CVE-2025-14174-Poc100—18 Dec 2025, 12:06
typeconfused/CVE-2025-14174-analysis41—02 Jan 2026, 15:53
Evidence context and dated references

Reality is general threat/review priority, combining observed exploitation, CVSS severity and fresh EPSS. Evidence confidence is separate. This is not calibrated risk, a victim count or an asset-specific assessment. A range reflects missing numeric inputs.

Evidence in context

Confidence in exploitation evidence
Exploitation recorded
Priority basis
Recorded exploitation; CVSS 8.8; EPSS 55.3%
Attention, last 30 days
0 distinct story titles; 0 press documents; 0 publisher domains.
Technical potential
network access, no prior privileges, user interaction.
Observed activity
Exploitation recorded in CISA KEV.
Known scale
Not quantified.
Evidence confidence basis
Trusted exploitation confirmation

Score evaluated: 2026-11-05 13:59:27.470209+00:00 · EPSS snapshot: 2026-11-05T12:03:04Z

Source event timeline
First press mention
11 Dec 2025, 08:00
Added to the CISA KEV catalog
12 Dec 2025, 00:00
Published
12 Dec 2025, 19:20
Latest press mention
19 Mar 2026, 07:00
Score calculated
05 Nov 2026, 13:59
PoCs on GitHub
2 repositories