CVE-2025-1121

MEDIUM

Google ChromeOS 15786.48.2 - Privilege Escalation via Recovery Image Handling

Title source: llm
STIX 2.1

Description

Privilege escalation in Installer and Recovery image handling in Google ChromeOS version 15786.48.2 on device allows an attacker with physical access to gain root code execution and potentially unenroll enterprise-managed devices via a specially crafted recovery image.

References (2)

Core 2
Core References
Broken Link, Issue Tracking, Vendor Advisory
https://issues.chromium.org/issues/b/336153054
Issue Tracking, Vendor Advisory
https://issuetracker.google.com/issues/336153054

Scores

CVSS v3 6.8
EPSS 0.0001
EPSS Percentile 2.8%
Attack Vector PHYSICAL
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact total

Details

CWE
CWE-269
Status published
Products (1)
google/chrome_os 15786.48.0
Published Mar 07, 2025
Tracked Since Feb 18, 2026