CVE-2025-6044

6.1 mediumEPSS 0.1%

Medium (6.1) in google chrome os. EPSS 0.1% chance of exploitation in the next 30 days.

An Improper Access Control vulnerability in the Stylus Tools component of Google ChromeOS version 16238.64.0 on the garaged stylus devices allows a physical attacker to bypass the lock screen and access user files by removing the stylus while the device is closed and using the screen capture feature.

Severity

CVSS 3.1

6.1 medium

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS: 0.1% chance of exploitation in the next 30 days; higher than 1% of CVEs (scores of 2026-10-31)
CWE: CWE-287
Published: 2025-07-07
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

google:chrome_os

References

https://issues.chromium.org/issues/b/421184743
https://issuetracker.google.com/issues/421184743

Check your stack JSON