VULNERABILITY INTELLIGENCE

CVE-2025-1121

CVSS score6.8 MEDIUM

EPSS probability0.14%

CISA KEVNot currently listed

Published2025-03-07

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Privilege escalation in Installer and Recovery image handling in Google ChromeOS version 15786.48.2 on device allows an attacker with physical access to gain root code execution and potentially unenroll enterprise-managed devices via a specially crafted recovery image.

Weakness classification

134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-269

Primary references

7f6e188d-c52a-4a19-8674-3c3fa7d1fc7f — Broken Link, Issue Tracking, Vendor Advisory
7f6e188d-c52a-4a19-8674-3c3fa7d1fc7f — Issue Tracking, Vendor Advisory
134c704f-9b21-4f2e-91b3-4a467353bcc0 — Issue Tracking, Vendor Advisory