Skip to content
OpenAdvisories
Medium · 6.1 CVE-2025-6044 EUVD-2025-20310GHSA-p4mw-xc4p-683j

An Improper Access Control vulnerability in the Stylus Tools component of Google ChromeOS version 16238.64.0 on the garaged stylus devices …

Published Jul 7, 2025 · Updated Jul 9, 2025 · Assigned by ChromeOS

Description

An Improper Access Control vulnerability in the Stylus Tools component of Google ChromeOS version 16238.64.0 on the garaged stylus devices allows a physical attacker to bypass the lock screen and access user files by removing the stylus while the device is closed and using the screen capture feature.

Affected products

VendorProductAffectedFixed
Google ChromeOS 16238.64.0 – < 16238.64.0 16238.64.0

References