Unrated severityNVD Advisory· Published Mar 6, 2025· Updated May 8, 2025

CVE-2025-1121

Description

Privilege escalation in Installer and Recovery image handling in Google ChromeOS version 15786.48.2 on device allows an attacker with physical access to gain root code execution and potentially unenroll enterprise-managed devices via a specially crafted recovery image.

Affected products

Google/Chromellm-fuzzy2 versions
=15786.48.2+ 1 more
- (no CPE)range: =15786.48.2
- (no CPE)range: 15786.48.2

Patches

Vulnerability mechanics

References

issues.chromium.org/issues/b/336153054mitre
issuetracker.google.com/issues/336153054mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000