Threats Tagged 'cve-2025-14174'

WebKitGTK+ is port of the WebKit portable web rendering engine to the GTK+ platform. These packages provide WebKitGTK+ for GTK+ 3. Security Fix(es): * webkitgtk: webkitgtk: Use-after-free due to improper memory management (CVE-2025-43529) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43501) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43531) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43535) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2025-43536) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2025-43541) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2025-14174 is a high-severity out-of-bounds memory access vulnerability in the ANGLE component of Google Chrome on Mac systems prior to version 143.0.7499.110. This flaw allows a remote attacker to execute crafted HTML content that triggers out-of-bounds memory reads or writes, potentially leading to arbitrary code execution or browser compromise. Exploitation requires user interaction, such as visiting a malicious webpage, but no prior authentication is needed. The vulnerability impacts confidentiality, integrity, and availability, with a CVSS score of 8.8 indicating a serious risk. Although no known exploits are currently reported in the wild, the flaw’s nature and severity make it a critical patching priority. Organizations relying on Chrome on Mac platforms should update promptly to mitigate risks.

HighVulnerabilityUnited StatesCanadaUnited Kingdom+9#cve#cve-2025-14174