IP-DB.com
Türkçe English Deutsch Español
Entrar Obtener clave API
6.7Media

CVE-2025-1122

Google ChromeOS Publicada: (hace 1 año)

Descripción

Out-Of-Bounds Write in TPM2 Reference Library in Google ChromeOS 15753.50.0 stable on Cr50 Boards allows an attacker with root access to gain persistence and Bypass operating system verification via exploiting the NV_Read functionality during the Challenge-Response process.

Debilidad (CWE): CWE-787

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

FabricanteProductoVersiones
google chrome 122.0.6261.132
Google ChromeOS 15753.50.0 – < 15753.50.0

Referencias y parches

Coincidencias CPE (NVD) (1)
  • cpe:2.3:a:google:chrome:122.0.6261.132:*:*:*:*:*:*:*

CVE recientes del mismo producto — Google Chrome

5.4Media
CVE-2026-120930
Google Chrome

Incorrect authorization in Blink in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: High)

9.6Crítica
CVE-2026-120931
Google Chrome

Out of bounds write in WebGL in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

5.4Media
CVE-2026-121141
Google Chrome

Improper input validation in Editing in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)

8.8Alta
CVE-2026-121195
Google Chrome

Incorrect authorization in TrustedTypes in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)

7.8Alta
CVE-2026-121064
Google Chrome

Improper input validation in Performance in Google Chrome prior to 157.0.8103.38 allowed a local attacker to potentially execute arbitrary code inside the sandbox via a local program. (Chromium security severity: Low)

8.8Alta
CVE-2026-121069
Google Chrome

Use after free in Track in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)