IP-DB.com
Türkçe English Deutsch Español
Anmelden API-Schlüssel holen
6.7Mittel

CVE-2025-1122

Google ChromeOS Veröffentlicht: (vor 1 Jahr)

Beschreibung

Out-Of-Bounds Write in TPM2 Reference Library in Google ChromeOS 15753.50.0 stable on Cr50 Boards allows an attacker with root access to gain persistence and Bypass operating system verification via exploiting the NV_Read functionality during the Challenge-Response process.

Schwachstellentyp (CWE): CWE-787

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

HerstellerProduktVersionen
google chrome 122.0.6261.132
Google ChromeOS 15753.50.0 – < 15753.50.0

Referenzen und Patches

CPE-Treffer (NVD) (1)
  • cpe:2.3:a:google:chrome:122.0.6261.132:*:*:*:*:*:*:*

Neue CVEs im selben Produkt — Google Chrome

5.4Mittel
CVE-2026-120930
Google Chrome

Incorrect authorization in Blink in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: High)

9.6Kritisch
CVE-2026-120931
Google Chrome

Out of bounds write in WebGL in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

5.4Mittel
CVE-2026-121141
Google Chrome

Improper input validation in Editing in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)

8.8Hoch
CVE-2026-121195
Google Chrome

Incorrect authorization in TrustedTypes in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)

7.8Hoch
CVE-2026-121064
Google Chrome

Improper input validation in Performance in Google Chrome prior to 157.0.8103.38 allowed a local attacker to potentially execute arbitrary code inside the sandbox via a local program. (Chromium security severity: Low)

8.8Hoch
CVE-2026-121069
Google Chrome

Use after free in Track in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)