Skip to content
CVE PROGRAM SOURCE RECORD6.1 Medium

CVE-2025-6044

An Improper Access Control vulnerability in the Stylus Tools component of Google ChromeOS version 16238.64.0 on the garaged stylus devices allows a physical attacker to bypass the

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ChromeOS

Description

An Improper Access Control vulnerability in the Stylus Tools component of Google ChromeOS version 16238.64.0 on the garaged stylus devices allows a physical attacker to bypass the lock screen and access user files by removing the stylus while the device is closed and using the screen capture feature.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Google ChromeOS

  • 16238.64.0 to < 16238.64.0affected

References