Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
Insufficient policy enforcement in Loader in Google Chrome prior to 136.0.7103.113 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-04-19 | 1 | Disclosure1 |
| 2026-09-22 | 1 | PoC1 |
🥬 CVE-2025-4664: Exploiting a Chrome 0day to Leak Session Tokens Blog: https://amalmurali.me/posts/cve-2025-4664/ Author: @amalmurali47 https://t.co/3xYXiUYgES
Post summary
The tweet links to a blog post detailing exploitation of CVE-2025-4664 in Chrome, presenting it as a PoC for leaking session tokens, making 'PoC' the primary classification.
🚨 BREAKING: Google Chrome Zero-Day Exploit 2026 — CVE-2025-4664 CVSS Score: 9.8/10 (CRITICAL) Affected: 3.2 BILLION users worldwide Are you safe? Check your Chrome version NOW 👇 https://techpediax.com/google-chrome-zero-day-exploit-2026/ #ChromeZeroDay #CyberSecurity #CVE20254664 #CERTIn #InfoSec https://t.co/s9UzSUfPUE
Post summary
A tweet that announces the discovery of CVE‑2025‑4664, a critical zero‑day for Chrome, but provides no evidence of active use, exploitation code, or remediation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | chrome | - | - | - |