Google Chrome Multiple Vulnerabilities

Release Date: 15 May 2025

RISK: High Risk

TYPE: Clients - Browsers

Multiple vulnerabilities were identified in Google Chrome. A remote attacker could exploit some of these vulnerabilities to trigger sensitive information disclosure and remote code execution on the targeted system.

 

Note:

CVE-2025-4664 is being exploited in the wild, insufficient policy enforcement in Loader in Google Chrome prior to 136.0.7103.113 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Hence, the risk level is rated as High Risk.

---

Impact

• Information Disclosure
• Remote Code Execution

---

System / Technologies affected

• Google Chrome prior to 136.0.7103.113 (Linux)
• Google Chrome prior to 136.0.7103.113/.114 (Mac)
• Google Chrome prior to 136.0.7103.113/.114 (Windows)

---

Solutions

Before installation of the software, please visit the software vendor web-site for more details.

Apply fixes issued by the vendor:

• Update to version 136.0.7103.113 (Linux) or later
• Update to version 136.0.7103.113/.114 (Mac) or later
• Update to version 136.0.7103.113/.114 (Windows) or later

---

Vulnerability Identifier

• CVE-2025-4609
• CVE-2025-4664

---

Source

• Chrome

---

Related Link

• https://chromereleases.googleblog.com/2025/05/stable-channel-update-for-desktop_14.html