Improper Access Control in Stylus Tools for Google ChromeOS on Lenovo Devices

CVE-2025-6044

What is CVE-2025-6044?

An Improper Access Control vulnerability in the Stylus Tools component of Google ChromeOS on Lenovo devices enables a physical attacker to bypass the device's lock screen. By removing the stylus while the device is closed and utilizing the screen capture feature, unauthorized access to user files can be achieved, potentially exposing sensitive information.

References