CVE-2025-6044

MEDIUM

6.1

Description

An Improper Access Control vulnerability in the Stylus Tools component of Google ChromeOS version 16238.64.0 on the garaged stylus devices allows a physical attacker to bypass the lock screen and access user files by removing the stylus while the device is closed and using the screen capture feature.

Details CVE

Score CVSS v3.16.1

SeveriteMEDIUM

Vecteur CVSSCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Vecteur d'attaquePHYSICAL

ComplexiteLOW

Privileges requisNONE

Interaction utilisateurNONE

Publie7/7/2025

Derniere modification10/3/2025

Sourcenvd

Observations honeypot0

Produits affectes

google:chrome_os

Faiblesses (CWE)

CWE-287

References

https://issues.chromium.org/issues/b/421184743(7f6e188d-c52a-4a19-8674-3c3fa7d1fc7f)

https://issuetracker.google.com/issues/421184743(7f6e188d-c52a-4a19-8674-3c3fa7d1fc7f)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.