What is CVE-2025-1568?

CVE-2025-1568 is a high-severity vulnerability in Google Chrome Os, classified under Improper Access Control. CVSS score: 8.8/10. Published 2025-04-16.

How severe is CVE-2025-1568?

High severity. CVSS v3 base score is 8.8 out of 10.

Vulnerability in Google Chrome Os

CVE-2025-1568

Access Control Vulnerability in Gerrit chromiumos project configuration in Google ChromeOS 16063.87.0 allows an attacker with a registered Gerrit account to inject malicious code into ChromeOS projects and potentially achieve Remote Code Execution and Denial of Service via editing trusted pipelines by insufficient access controls and misconfigurations in Gerrit's project.config.

EPSS: 0.004 (31.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Google Chrome_os — versions 16063.87.0
Google Chromeos — versions 16063.87.0

Weakness classification (CWE)

CWE-284 — Improper Access Control

References

7f6e188d-c52a-4a19-8674-3c3fa7d1fc7f (Mailing List, Issue Tracking)
7f6e188d-c52a-4a19-8674-3c3fa7d1fc7f (Broken Link)

Frequently asked questions

What is CVE-2025-1568?: CVE-2025-1568 is a high-severity vulnerability in Google Chrome Os, classified under Improper Access Control. CVSS score: 8.8/10. Published 2025-04-16.
How severe is CVE-2025-1568?: High severity. CVSS v3 base score is 8.8 out of 10.