CVE details

CVE-2025-4664

Insufficient policy enforcement in Loader in Google Chrome prior to 136.

This vulnerability is known to have been exploited in attacks. Update affected browsers immediately.

Severity: Medium
CVSS: 4.3
Published: 2025-05-14
Fixed in: 136.0.7103.113

Description

Insufficient policy enforcement in Loader in Google Chrome prior to 136.0.7103.113 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)

Affected products

Google Chrome · → 136.0.7103.113
Chromium · → 136.0.7103.113

Overlaps: Google Chrome, Chromium

Source

View on NVD

Check if your browser is affected