6.8

CVE-2025-1121

EPSS 0.01%
Veröffentlicht 07.03.2025 00:15:34
Zuletzt bearbeitet 21.07.2025 16:57:28
Quelle 7f6e188d-c52a-4a19-8674-3c3fa7
CVE-Watchlists
Login
Unerledigt
Login

Privilege escalation in Installer and Recovery image handling in Google ChromeOS version 15786.48.2 on device allows an attacker with physical access to gain root code 
execution and potentially unenroll enterprise-managed devices via a specially crafted recovery image.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 5

NVD 1 VulnDex Vulnerability Enrichment 1

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Google ≫ Chrome Os Version15786.48.0

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.01%	0.027

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
134c704f-9b21-4f2e-91b3-4a467353bcc0	6.8	0.9	5.9	CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-269 Improper Privilege Management

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

https://issuetracker.google.com/issues/336153054

Vendor Advisory

Issue Tracking

https://issues.chromium.org/issues/b/336153054

Vendor Advisory

Broken Link

Issue Tracking

https://nvd.nist.gov/vuln/detail/CVE-2025-1121

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2025-1121

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2025-1121

EUVD