Search for vulnerabilities
Vulnerability details: VCID-g1sk-8229-pqfb
Vulnerability ID VCID-g1sk-8229-pqfb
Aliases CVE-2025-4664
Summary Insufficient policy enforcement in Loader in Google Chrome prior to 136.0.7103.113 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
Status Published
Exploitability 0.5
Weighted Severity 3.9
Risk 1.9
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.00014 https://api.first.org/data/v1/epss?cve=CVE-2025-4664
epss 0.00014 https://api.first.org/data/v1/epss?cve=CVE-2025-4664
epss 0.00014 https://api.first.org/data/v1/epss?cve=CVE-2025-4664
epss 0.00014 https://api.first.org/data/v1/epss?cve=CVE-2025-4664
epss 0.00014 https://api.first.org/data/v1/epss?cve=CVE-2025-4664
epss 0.00014 https://api.first.org/data/v1/epss?cve=CVE-2025-4664
epss 0.00014 https://api.first.org/data/v1/epss?cve=CVE-2025-4664
epss 0.00014 https://api.first.org/data/v1/epss?cve=CVE-2025-4664
epss 0.00014 https://api.first.org/data/v1/epss?cve=CVE-2025-4664
epss 0.00018 https://api.first.org/data/v1/epss?cve=CVE-2025-4664
epss 0.00018 https://api.first.org/data/v1/epss?cve=CVE-2025-4664
epss 0.00018 https://api.first.org/data/v1/epss?cve=CVE-2025-4664
epss 0.00018 https://api.first.org/data/v1/epss?cve=CVE-2025-4664
epss 0.00018 https://api.first.org/data/v1/epss?cve=CVE-2025-4664
epss 0.00018 https://api.first.org/data/v1/epss?cve=CVE-2025-4664
epss 0.00018 https://api.first.org/data/v1/epss?cve=CVE-2025-4664
epss 0.00019 https://api.first.org/data/v1/epss?cve=CVE-2025-4664
epss 0.00019 https://api.first.org/data/v1/epss?cve=CVE-2025-4664
cvssv3.1 4.3 https://chromereleases.googleblog.com/2025/05/stable-channel-update-for-desktop_14.html
ssvc Track https://chromereleases.googleblog.com/2025/05/stable-channel-update-for-desktop_14.html
cvssv3.1 4.3 https://issues.chromium.org/issues/415810136
ssvc Track https://issues.chromium.org/issues/415810136
cvssv3.1 4.3 https://nvd.nist.gov/vuln/detail/CVE-2025-4664
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2025-4664
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4664
415810136 https://issues.chromium.org/issues/415810136
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
CVE-2025-4664 https://nvd.nist.gov/vuln/detail/CVE-2025-4664
stable-channel-update-for-desktop_14.html https://chromereleases.googleblog.com/2025/05/stable-channel-update-for-desktop_14.html
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N Found at https://chromereleases.googleblog.com/2025/05/stable-channel-update-for-desktop_14.html
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-06-05T19:18:35Z/ Found at https://chromereleases.googleblog.com/2025/05/stable-channel-update-for-desktop_14.html
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N Found at https://issues.chromium.org/issues/415810136
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-06-05T19:18:35Z/ Found at https://issues.chromium.org/issues/415810136
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2025-4664
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.01583
EPSS Score 0.00014
Published At Aug. 6, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-31T09:03:32.145596+00:00 Alpine Linux Importer Import https://secdb.alpinelinux.org/edge/community.json 37.0.0