VulnerabilityAnalyzed
CVE-2025-1121
Privilege escalation in Installer and Recovery image handling in Google ChromeOS version 15786.48.2 on device allows an attacker with physical access to gain root code execution and potentially unenroll enterprise-managed devices via a specially crafted…
MEDIUM 6.8EPSS 0.14%
Does this matter?
Lower severity and a low EPSS score (0.14%). Track it; it rarely justifies an emergency change on its own.
Description
Privilege escalation in Installer and Recovery image handling in Google ChromeOS version 15786.48.2 on device allows an attacker with physical access to gain root code execution and potentially unenroll enterprise-managed devices via a specially crafted recovery image.
- CVSS 3.1
- 6.8 MEDIUMCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 0.14% probability · 3th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-269
- Affected
- google/chrome os
- Source
- 7f6e188d-c52a-4a19-8674-3c3fa7d1fc7f
References
- https://issues.chromium.org/issues/b/336153054Broken Link, Issue Tracking, Vendor Advisory
- https://issuetracker.google.com/issues/336153054Issue Tracking, Vendor Advisory
- https://issuetracker.google.com/issues/336153054Issue Tracking, Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.