CVE-2025-14174
HIGH KEVGoogle Chrome <143.0.7499.110 - Memory Corruption
Title source: llmExploitation Summary
CVE-2025-14174 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added December 12, 2025. EIP tracks 5 public exploits from researchers including XiaomingX, Satirush, George0Papasotiriou.
AI-analyzed exploit summary The repository contains a functional SQL injection exploit for CVE-2025-10042 targeting WordPress Quiz Maker plugin. The exploit uses time-based blind SQLi to extract admin credentials and hashes.
Description
Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)
Exploits (5)
The repository contains a functional SQL injection exploit for CVE-2025-10042 targeting WordPress Quiz Maker plugin. The exploit uses time-based blind SQLi to extract admin credentials and hashes.
This repository contains a functional PoC exploit for CVE-2025-14174, targeting a memory corruption vulnerability in the ANGLE graphics engine. The exploit enables remote code execution via crafted WebGL content and is designed to bypass mitigations in patched systems.
This PoC demonstrates a use-after-free vulnerability in the V8 JavaScript engine of Google Chrome prior to version 121.0.6167.85. The exploit manipulates garbage collection to create a dangling reference, which is then used to corrupt memory and potentially achieve arbitrary code execution.
The repository contains only a README and frontend JavaScript libraries (jQuery) with no exploit code or technical analysis related to CVE-2025-14174. It appears to be a placeholder or unrelated project.
Technical analysis and proof-of-concept for CVE-2025-14174, an out-of-bounds write vulnerability in ANGLE's Metal backend when uploading depth textures via a staging buffer.
References (4)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H