CVE-2025-14174: chrome from 143.0.7499.41 (inclusive), before 143.0.7499.110 (exclusive), from 143.0.7499.40 (inclusive), before…

Affected technology

chrome · from 143.0.7499.41 (inclusive), before 143.0.7499.110 (exclusive)
google

chrome · from 143.0.7499.40 (inclusive), before 143.0.7499.109 (exclusive)
google

chrome · through 143.0.7499.40 (inclusive)
google

safari · before 26.2 (exclusive)
apple

ipados · before 18.7.3 (exclusive)
apple

ipados · from 26.0 (inclusive), before 26.2 (exclusive)
apple

iphone os · before 18.7.3 (exclusive)
apple

iphone os · from 26.0 (inclusive), before 26.2 (exclusive)
apple

macos · before 26.2 (exclusive)
apple

tvos · before 26.2 (exclusive)
apple

visionos · before 26.2 (exclusive)
apple

watchos · before 26.2 (exclusive)
apple

edge chromium · before 143.0.3650.80 (exclusive)
microsoft

Chrome · 143.0.7499.110 to before 143.0.7499.110
Google

Description’s affected range: prior to 143.0.7499.110 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)

Component: Not specified by the source

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · User interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.