Skip to content
OpenAdvisories
Medium · 6.8 CVE-2025-1121 EUVD-2025-7378GHSA-9p6p-jg3p-f8mv

Privilege escalation in Installer and Recovery image handling in Google ChromeOS version 15786.48.2 on device allows an attacker with physi…

Published Mar 6, 2025 · Updated May 8, 2025 · Assigned by ChromeOS

Description

Privilege escalation in Installer and Recovery image handling in Google ChromeOS version 15786.48.2 on device allows an attacker with physical access to gain root code
execution and potentially unenroll enterprise-managed devices via a specially crafted recovery image.

Affected products

VendorProductAffectedFixed
Google ChromeOS 15786.48.2 – < 15786.48.2 15786.48.2

References