CVE-2025-1121

Description

Privilege escalation in Installer and Recovery image handling in Google ChromeOS version 15786.48.2 on device allows an attacker with physical access to gain root code execution and potentially unenroll enterprise-managed devices via a specially crafted recovery image.

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

References and patches

• https://issuetracker.google.com/issues/336153054 Issue TrackingVendor Advisory
• https://issues.chromium.org/issues/b/336153054 Broken LinkIssue TrackingVendor Advisory