CVE-2025-4664

CVSS 3.1: 4.3 medium
EPSS: 6%p92
Published: May 14, 2025 · May 14, 2025
Modified: Jun 17, 2026

Analyze CVE-2025-4664 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Insufficient policy enforcement in Loader in Google Chrome prior to 136.0.7103.113 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)

Vendors: google

Products: chrome

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (5.6%)

In the news

17 stories

Google Patches Chrome Zero-Day CVE-2025-10585 as Active V8 Exploit Threatens Millions

The Hacker NewsSep 18, 05:49 UTC · Sep 18, 2025Exploit / PoCExploitedCVE-2025-10585 CVE-2025-2783 CVE-2025-4664+39 · 4 reads

CVE-2025-6554 marks the fifth actively exploited Chrome Zero

Security AffairsJul 16, 10:11 UTC · Jul 16, 2025VulnerabilityExploitedCVE-2025-6554 CVE-2025-6558 CVE-2025-7656+47 · 2 reads

Urgent: Google Releases Critical Chrome Update for CVE-2025

The Hacker NewsJul 15, 00:00 UTC · Jul 15, 2025Exploit / PoCExploitedCVE-2025-6558 CVE-2025-6554 CVE-2025-2783+23 · 1 read

Chrome Zero-Day CVE-2025-6554 Under Active Attack — Google Issues Security Update

The Hacker NewsJul 15, 00:00 UTC · Jul 15, 2025Exploit / PoCExploitedCVE-2025-6554 CVE-2025-2783 CVE-2025-4664+14

CVE-2025-6554 is the fourth Chrome zero

Security AffairsJul 2, 08:21 UTC · Jul 2, 2025VulnerabilityExploitedCVE-2025-6554 CVE-2025-5419 CVE-2025-4664+18 · 5 reads

Patch Tuesday, June 2025 Edition

Krebs on SecurityJun 11, 02:03 UTC · Jun 11, 2025VulnerabilityExploitedCVE-2025-33053 CVE-2025-33073 CVE-2025-5419+13 · 2 reads

⚡ Weekly Recap: Zero-Day Exploits, Insider Threats, APT Targeting, Botnets and More

The Hacker NewsMay 19, 14:35 UTC · May 19, 2025Exploit / PoCExploitedCVE-2025-30397 CVE-2025-30400 CVE-2025-32701+223

Week in review: Microsoft patches 5 actively exploited 0-days, recently fixed Chrome vulnerability exploited

Help Net SecurityMay 18, 00:00 UTC · May 18, 2025VulnerabilityExploitedCVE-2025-4664 CVE-2025-32756 CVE-2025-4427+22 · 1 read

U.S. CISA adds Google Chromium, DrayTek routers, and SAP NetWeaver flaws to its Known Exploited Vulnerabilities catalog

Security AffairsMay 17, 08:02 UTC · May 17, 2025Exploit / PoCExploitedCVE-2024-12987 CVE-2025-4664 CVE-2025-429991 · 1 read

Google fixed a Chrome vulnerability that could lead to full account takeover

Security AffairsMay 16, 07:41 UTC · May 16, 2025VulnerabilityExploitedCVE-2025-4664 CVE-2025-27832 · 1 read

CISA: Recently fixed Chrome vulnerability exploited in the wild (CVE-2025-4664)

Help Net SecurityMay 16, 00:00 UTC · May 16, 2025Exploit / PoCExploitedCVE-2025-46645 · 1 read

New Chrome Vulnerability Enables Cross-Origin Data Leak via Loader Referrer Policy

The Hacker NewsMay 15, 00:00 UTC · May 15, 2025VulnerabilityExploitedCVE-2025-4664 CVE-2025-27833 · 1 read