CVEvulnerability

CVE-2025-1121

6.8 MEDIUM Published 2025-03-07 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2025-03-07
Last modified
2026-06-17
Assigner
7f6e188d-c52a-4a19-8674-3c3fa7d1fc7f
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
6.8 MEDIUM — CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-269

Description

Privilege escalation in Installer and Recovery image handling in Google ChromeOS version 15786.48.2 on device allows an attacker with physical access to gain root code execution and potentially unenroll enterprise-managed devices via a specially crafted recovery image.

Affected configurations

• google chrome os 15786.48.0

Related

Weakness · CWE (1)

  • CWE-269 Improper Privilege Management weakness

References