Attackers are using this December 10, 2025 Critical severity

Chrome flaw used in attacks

A flaw in Chrome’s graphics code (ANGLE), “Out of bounds memory access in ANGLE”, lets a booby-trapped web page run code. Google says an exploit exists in the wild. Fixed in Chrome 143.0.7499.109.

On a Mac

Chrome and other Chromium browsers, and apps built on Electron or Chromium. Each app carries its own copy, so it stays exposed until that app updates, even when Chrome is current.

The fix

• Chrome 143.0.7499.109
• Electron 38.8.0, 39.2.7, 40.0.0, 41.0.0, 42.0.0, 43.0.0, 44.0.0 and 45.0.0

Attacks

In CISA’s catalog of exploited flaws since December 12, 2025.

CVE

CVE-2025-14174

Sources

• chromereleases.googleblog.com
• cisa.gov

From the Briefing, updated 19 minutes ago.