In CISA KEVNot scored
CVE-2025-14174
Google Chromium Out of Bounds Memory Access Vulnerability
GoogleChromium
Status
- Exploited in the wild
- In CISA KEV since 12 Dec 2025
Federal deadlineFri 2 Jan, 23:59 UTC
Passed 295 days ago
CISA KEV · added 12 Dec 2025
Exploit probabilityEPSSchecked 23 Oct
22%probability of exploitation in the next 30 days
Higher than 98% of scored CVEs
SeverityCVSS
–Not scored yet
Description NVD
Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)
CISA required action
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Coverage 6 articles · 5 outlets
See the full timelineShow as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Thu 12 Feb · 04:01 UTC | SecurityOnline | Apple Zero-Day (CVE-2026-20700) Exploited in the Wild |
| Thu 12 Feb · 07:25 UTC | The Hacker News | Apple Fixes Exploited Zero-Day Affecting iOS, macOS, and Apple Devices |
| Thu 12 Feb · 11:25 UTC | Security Affairs | Apple fixed first actively exploited zero-day in 2026 |
| Wed 18 Mar · 15:41 UTC | SecurityWeek | ‘DarkSword’ iOS Exploit Kit Used by State-Sponsored Hackers, Spyware Vendors |
| Wed 18 Mar · 21:48 UTC | Dark Reading | DarkSword: iPhone Exploit Kit Serves Spies & Thieves Alike |
| Thu 19 Mar · 09:59 UTC | The Hacker News | DarkSword iOS Exploit Kit Uses 6 Flaws, 3 Zero-Days for Full Device Takeover |
- DarkSword iOS Exploit Kit Uses 6 Flaws, 3 Zero-Days for Full Device TakeoverThe Hacker News · mentions it in passing
- DarkSword: iPhone Exploit Kit Serves Spies & Thieves AlikeDark Reading · mentions it in passing
- ‘DarkSword’ iOS Exploit Kit Used by State-Sponsored Hackers, Spyware VendorsSecurityWeek · mentions it in passing
- Apple fixed first actively exploited zero-day in 2026Security Affairs · mentions it in passing
- Apple Fixes Exploited Zero-Day Affecting iOS, macOS, and Apple DevicesThe Hacker News · mentions it in passing
- Apple Zero-Day (CVE-2026-20700) Exploited in the WildSecurityOnline · first in our coverage · mentions it in passing