CVE-2025-4664
CVE-2025-4664
4.3
MediumPublished:
Last updated:
Source:chrome-cve-admin@google.com
Analyzed
CVSS Vector
v3.1- Attack Vector
- Network
- Attack Complexity
- Low
- Privileges Required
- None
- User Interaction
- Required
- Scope
- Unchanged
- Confidentiality
- Low
- Integrity
- None
- Availability
- None
Description
Insufficient policy enforcement in Loader in Google Chrome prior to 136.0.7103.113 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
References
chrome-cve-admin@google.com
https://chromereleases.googleblog.com/2025/05/stable-channel-update-for-desktop_14.htmlchrome-cve-admin@google.com
https://issues.chromium.org/issues/415810136