6.8

CVE-2025-1121

EPSS 0.01%
Published 07.03.2025 00:15:34
Last modified 21.07.2025 16:57:28
Source 7f6e188d-c52a-4a19-8674-3c3fa7
Teams watchlist Login
Open Login

Privilege escalation in Installer and Recovery image handling in Google ChromeOS version 15786.48.2 on device allows an attacker with physical access to gain root code 
execution and potentially unenroll enterprise-managed devices via a specially crafted recovery image.

Affected products Warnungen 0 Metrics 2 CWE 1 References 5

Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD

This information is available to logged-in users.

Data is provided by the National Vulnerability Database (NVD)

Google ≫ Chrome Os Version15786.48.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.01%	0.002

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
134c704f-9b21-4f2e-91b3-4a467353bcc0	6.8	0.9	5.9	CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-269 Improper Privilege Management

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

https://issuetracker.google.com/issues/336153054

Vendor Advisory

Issue Tracking

https://issues.chromium.org/issues/b/336153054

Vendor Advisory

Broken Link

Issue Tracking

https://nvd.nist.gov/vuln/detail/CVE-2025-1121

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2025-1121

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2025-1121

EUVD