CVE-2025-1568

CVSS 3.1 Score 8.8 of 10 (high)

Details

Published Apr 16, 2025

Updated: May 8, 2025

CWE ID 284

Summary

CVE-2025-1568 is an access control vulnerability affecting Google ChromeOS 16063.87.0. An attacker with a registered Gerrit account can exploit insufficient access controls and misconfigurations in the project.config of the ChromiumOS project in Gerrit. By injecting malicious code into trusted pipelines, the attacker may achieve remote code execution or denial of service. This issue highlights the importance of robust access controls and proper configuration management in Git repositories.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Google Chrome OS

Affected Vendors

Google

Advisories, Assessments, and Mitigations

https://app.recordedfuture.com/live/sc/entity/3mS7o5
https://www.cve.org/CVERecord?id=CVE-2025-1568
https://nvd.nist.gov/vuln/detail/CVE-2025-1568

Back to Vulnerability Database

Platform Features

Products

Use Cases

Teams

Industries

Services

Threats to the 2025 NATO Summit

Artificial Eyes: Generative AI in China’s Military Intelligence

GrayAlpha Uses Diverse Infection Vectors to Deploy PowerNet Loader and NetSupport RAT

Know What Matters

For Customers

For Partners