CVE-2025-4664

MEDIUM 4.3EPSS 5.6%

Insufficient policy enforcement in Loader in Google Chrome prior to 136.0.7103.113 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)

CVSS v3.1: 4.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
CVSS v3.1: 4.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
EPSS: 5.62% chance of exploitation in the next 30 days, 92th percentile
Published: 2025-05-14
Updated: 2025-06-05

Proof-of-concept exploits (2)

amalmurali47/cve-2025-46644★ · 2025-06-30
speinador/CVE-2025-46640★ · 2025-06-12

References

Related