Home 16238.64.0 (custom) before 16238.64.0
affected
Description
An Improper Access Control vulnerability in the Stylus Tools component of Google ChromeOS version 16238.64.0 on the garaged stylus devices allows a physical attacker to bypass the lock screen and access user files by removing the stylus while the device is closed and using the screen capture feature.
Problem types
Files or Directories Accessible to External Parties
Product status
References
issuetracker.google.com/issues/421184743
issues.chromium.org/issues/b/421184743