EUVD-2025-7378

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

Privilege escalation in ChromeOS allows physical attackers to gain root access via a crafted recovery image

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2025-1121	7 Mar 202501:34	–	circl
CNNVD	Google Chrome OS 安全漏洞	6 Mar 202500:00	–	cnnvd
CNVD	Google ChromeOS Elevation of Privilege Vulnerability	13 Mar 202500:00	–	cnvd
CVE	CVE-2025-1121	6 Mar 202523:49	–	cve
Cvelist	CVE-2025-1121	6 Mar 202523:49	–	cvelist
Google Chrome Security Advisories	Stable Channel Update for ChromeOS / ChromeOS Flex	9 Sep 202400:00	–	chrome
NVD	CVE-2025-1121	7 Mar 202500:15	–	nvd
Positive Technologies	PT-2025-10016 · Google · Chrome Os	6 Mar 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-1121	7 Jan 202609:54	–	redhatcve
Vulnrichment	CVE-2025-1121	6 Mar 202523:49	–	vulnrichment

[
  {
    "enisaIdVendor": [
      {
        "id": "f7d610fb-f839-3cf1-8776-1ed6e6c09b39",
        "vendor": {
          "name": "Google"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "10afd741-43c1-3d5c-89f6-128950f48273",
        "product": {
          "name": "ChromeOS"
        },
        "product_version": "15786.48.2 <15786.48.2"
      },
      {
        "id": "ac07739b-1443-3918-86bd-e52529dac6fa",
        "product": {
          "name": "ChromeOS"
        },
        "product_version": "123.0.6312.112"
      }
    ]
  }
]

Source	Link
issuetracker	www.issuetracker.google.com/issues/336153054
issues	www.issues.chromium.org/issues/b/336153054

03 Oct 2025 20:07Current

6.4Medium risk

Vulners AI Score6.4

CVSS 3.16.8

EPSS0.00014

SSVC

privilege escalation chromeos recovery image root access physical access enterprise devices