Memory corruption in Google Chrome
Priority CRITICAL 97Exploited in the wildCWE-119Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- Required
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA and Red Hat. Impact type from CWE-119 and the CVSS impact.
Summary
Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)
Why it matters now
Exploitation Active In CISA KEV since 2025-12-12CISA due date 2026-01-02
EPSS 0.55334 99th percentileScored 2026-11-07
Fix Fixed Chrome (Google): 143.0.7499.110Red Hat: 11 advisories
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Active
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Chrome | 143.0.7499.110 to before 143.0.7499.110 | 143.0.7499.110 | Patch available | CNA |
- Chrome VendorGoogle Affected 143.0.7499.110 to before 143.0.7499.110 Fixed in 143.0.7499.110 Patch available CNA
CPE configurations NVD · 14
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* | 143.0.7499.41 to before 143.0.7499.110 | Vulnerable | |
| cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Apple |
| cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* | 143.0.7499.40 to before 143.0.7499.109 | Vulnerable | |
| cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Linux |
| cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Microsoft |
| cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* | up to 143.0.7499.40 | Vulnerable | |
| cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:* | before 26.2 | Vulnerable | Apple |
| cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:* | before 18.7.3; 26.0 to before 26.2 | Vulnerable | Apple |
| cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* | before 18.7.3; 26.0 to before 26.2 | Vulnerable | Apple |
| cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* | before 26.2 | Vulnerable | Apple |
- cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* Versions 143.0.7499.41 to before 143.0.7499.110 Vulnerable ·Google
- cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Apple
- cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* Versions 143.0.7499.40 to before 143.0.7499.109 Vulnerable ·Google
- cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Linux
- cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Microsoft
- cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* Versions up to 143.0.7499.40 Vulnerable ·Google
- cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:* Versions before 26.2 Vulnerable ·Apple
- cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:* Versions before 18.7.3; 26.0 to before 26.2 Vulnerable ·Apple
- cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* Versions before 18.7.3; 26.0 to before 26.2 Vulnerable ·Apple
- cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* Versions before 26.2 Vulnerable ·Apple
Show 4 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:* | before 26.2 | Vulnerable | Apple |
| cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:* | before 26.2 | Vulnerable | Apple |
| cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:* | before 26.2 | Vulnerable | Apple |
| cpe:2.3:a:microsoft:edge_chromium:*:*:*:*:*:*:*:* | before 143.0.3650.80 | Vulnerable | Microsoft |
- cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:* Versions before 26.2 Vulnerable ·Apple
- cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:* Versions before 26.2 Vulnerable ·Apple
- cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:* Versions before 26.2 Vulnerable ·Apple
- cpe:2.3:a:microsoft:edge_chromium:*:*:*:*:*:*:*:* Versions before 143.0.3650.80 Vulnerable ·Microsoft
Remediation
- Fix · CNA Chrome (Google) Fixed in 143.0.7499.110
Red Hat 11 advisories
- RHSA-2025:23975 Released 2025-12-24 · Red Hat rating Importantwebkitgtk4 security update
- Red Hat Enterprise Linux Server (v. 7 ELS) webkitgtk4-2.50.4-2.el7_9, webkitgtk4-devel-2.50.4-2.el7_9, webkitgtk4-jsc-2.50.4-2.el7_9 +1
- Red Hat Enterprise Linux Server Optional (v. 7 ELS) webkitgtk4-devel-2.50.4-2.el7_9, webkitgtk4-doc-2.50.4-2.el7_9, webkitgtk4-jsc-devel-2.50.4-2.el7_9
- RHSA-2025:23974 Released 2025-12-24 · Red Hat rating Importantwebkit2gtk3 security update
- Red Hat Enterprise Linux AppStream EUS (v.9.6) webkit2gtk3-2.50.4-1.el9_6, webkit2gtk3-devel-2.50.4-1.el9_6, webkit2gtk3-jsc-2.50.4-1.el9_6 +1
- RHSA-2025:23972 Released 2025-12-24 · Red Hat rating Importantwebkit2gtk3 security update
- Red Hat Enterprise Linux AppStream EUS (v.9.4) webkit2gtk3-2.50.4-1.el9_4, webkit2gtk3-devel-2.50.4-1.el9_4, webkit2gtk3-jsc-2.50.4-1.el9_4 +1
Show 8 more Red Hat advisories
- RHSA-2025:23973 Released 2025-12-24 · Red Hat rating Importantwebkit2gtk3 security update
- Red Hat Enterprise Linux AppStream E4S (v.8.8) webkit2gtk3-2.50.4-1.el8_8, webkit2gtk3-devel-2.50.4-1.el8_8, webkit2gtk3-jsc-2.50.4-1.el8_8 +1
- Red Hat Enterprise Linux AppStream TUS (v.8.8) webkit2gtk3-2.50.4-1.el8_8, webkit2gtk3-devel-2.50.4-1.el8_8, webkit2gtk3-jsc-2.50.4-1.el8_8 +1
- RHSA-2025:23971 Released 2025-12-24 · Red Hat rating Importantwebkit2gtk3 security update
- Red Hat Enterprise Linux AppStream E4S (v.9.2) webkit2gtk3-2.50.4-1.el9_2, webkit2gtk3-devel-2.50.4-1.el9_2, webkit2gtk3-jsc-2.50.4-1.el9_2 +1
- RHSA-2025:23970 Released 2025-12-24 · Red Hat rating Importantwebkit2gtk3 security update
- Red Hat Enterprise Linux AppStream E4S (v.9.0) webkit2gtk3-2.50.4-1.el9_0, webkit2gtk3-devel-2.50.4-1.el9_0, webkit2gtk3-jsc-2.50.4-1.el9_0 +1
- RHSA-2025:23969 Released 2025-12-24 · Red Hat rating Importantwebkit2gtk3 security update
- Red Hat Enterprise Linux AppStream AUS (v. 8.2) webkit2gtk3-2.50.4-1.el8_2, webkit2gtk3-devel-2.50.4-1.el8_2, webkit2gtk3-jsc-2.50.4-1.el8_2 +1
- RHSA-2025:23968 Released 2025-12-24 · Red Hat rating Importantwebkit2gtk3 security update
- Red Hat Enterprise Linux AppStream AUS (v.8.6) webkit2gtk3-2.50.4-1.el8_6, webkit2gtk3-devel-2.50.4-1.el8_6, webkit2gtk3-jsc-2.50.4-1.el8_6 +1
- Red Hat Enterprise Linux AppStream E4S (v.8.6) webkit2gtk3-2.50.4-1.el8_6, webkit2gtk3-devel-2.50.4-1.el8_6, webkit2gtk3-jsc-2.50.4-1.el8_6 +1
- Red Hat Enterprise Linux AppStream TUS (v.8.6) webkit2gtk3-2.50.4-1.el8_6, webkit2gtk3-devel-2.50.4-1.el8_6, webkit2gtk3-jsc-2.50.4-1.el8_6 +1
- RHSA-2025:23967 Released 2025-12-24 · Red Hat rating Importantwebkit2gtk3 security update
- Red Hat Enterprise Linux AppStream AUS (v.8.4) webkit2gtk3-2.50.4-1.el8_4, webkit2gtk3-devel-2.50.4-1.el8_4, webkit2gtk3-jsc-2.50.4-1.el8_4 +1
- Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) webkit2gtk3-2.50.4-1.el8_4, webkit2gtk3-devel-2.50.4-1.el8_4, webkit2gtk3-jsc-2.50.4-1.el8_4 +1
- RHSA-2025:23700 Released 2025-12-18 · Red Hat rating Importantwebkit2gtk3 security update
- Red Hat Enterprise Linux AppStream (v. 9) webkit2gtk3-2.50.4-1.el9_7, webkit2gtk3-devel-2.50.4-1.el9_7, webkit2gtk3-jsc-2.50.4-1.el9_7 +1
- RHSA-2025:23663 Released 2025-12-18 · Red Hat rating Importantwebkit2gtk3 security update
- Red Hat Enterprise Linux AppStream (v. 8) webkit2gtk3-2.50.4-1.el8_10, webkit2gtk3-devel-2.50.4-1.el8_10, webkit2gtk3-jsc-2.50.4-1.el8_10 +1
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Release ·
Google Chrome 143.0.7499.110
3 records Highest priority Priority CRITICAL 1 CRITICAL, 2 LOW
Other records, highest priority first
- TI-2025-13130 Use after free in Google ChromePriority LOW 27
- TI-2025-13131 Clickjacking in Google ChromePriority LOW 20
Vendor assessments
Red Hat
Red Hat rating: Important. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Enterprise Linux AppStream (v. 8) | Fixed | RHSA-2025:23663 |
| Red Hat Enterprise Linux AppStream (v. 9) | Fixed | RHSA-2025:23700 |
| Red Hat Enterprise Linux AppStream AUS (v. 8.2) | Fixed | RHSA-2025:23969 |
| Red Hat Enterprise Linux AppStream AUS (v.8.4) | Fixed | RHSA-2025:23967 |
| Red Hat Enterprise Linux AppStream AUS (v.8.6) | Fixed | RHSA-2025:23968 |
| Red Hat Enterprise Linux AppStream E4S (v.8.6) | Fixed | RHSA-2025:23968 |
| Red Hat Enterprise Linux AppStream E4S (v.8.8) | Fixed | RHSA-2025:23973 |
| Red Hat Enterprise Linux AppStream E4S (v.9.0) | Fixed | RHSA-2025:23970 |
| Red Hat Enterprise Linux AppStream E4S (v.9.2) | Fixed | RHSA-2025:23971 |
| Red Hat Enterprise Linux AppStream EUS (v.9.4) | Fixed | RHSA-2025:23972 |
| Red Hat Enterprise Linux AppStream EUS (v.9.6) | Fixed | RHSA-2025:23974 |
| Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) | Fixed | RHSA-2025:23967 |
| Red Hat Enterprise Linux AppStream TUS (v.8.6) | Fixed | RHSA-2025:23968 |
| Red Hat Enterprise Linux AppStream TUS (v.8.8) | Fixed | RHSA-2025:23973 |
| Red Hat Enterprise Linux Server (v. 7 ELS) | Fixed | RHSA-2025:23975 |
| Red Hat Enterprise Linux Server Optional (v. 7 ELS) | Fixed | RHSA-2025:23975 |
Not affected: 4 products
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 7
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 9
Microsoft
Microsoft's page for this CVE →
- Impact
- —
- Exploited
- —
- Publicly disclosed
- —
- Exploitability
- —
| Product | Status | Plan or fix |
|---|---|---|
| Microsoft Edge (Chromium-based) | Fixed | 143.0.3650.80 · Security Update |
Timeline
- 2025-12-12 Added to CISA KEV
- 2026-10-02 Threatist record created from CVE-2025-14174
- 2026-10-03 Alias added: GHSA-9fjm-6w64-76r7
- 2026-10-25 EPSS moved to the 99th percentile and above
References
Advisory 2
More Google Chrome vulnerabilities
- TI-2025-09686 Type confusion in Google Chrome KEVCVSS 3.1CRITICAL 9.8
- TI-2024-07390 Type confusion in Google Chrome KEVCVSS 3.1CRITICAL 9.6
- TI-2024-04898 Type confusion in Google Chrome KEVCVSS 3.1CRITICAL 9.6
- TI-2024-04600 Type confusion in Google Chrome KEVCVSS 3.1CRITICAL 9.6
- TI-2024-04346 Use after free in Google Chrome KEVCVSS 3.1CRITICAL 9.6
- TI-2023-05824 Integer overflow in Google Chrome KEVCVSS 3.1CRITICAL 9.6
Sources
- CVE-2025-14174 · CVE Program
- CVE-2025-14174 · NVD
- CISA Known Exploited Vulnerabilities
- FIRST EPSS
- GHSA-9fjm-6w64-76r7 · GitHub Advisory Database · CC BY 4.0
- CVE-2025-14174 · Microsoft Security Update Guide
- CVE-2025-14174 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences