Google ChromeOS Improper Access Control Vulnerability in Stylus Tools Component on Lenovo Devices

A vulnerability allowing improper access control has been identified in the Stylus Tools component of Google ChromeOS, specifically in version 16238.64.0 on Lenovo devices. This vulnerability enables a physical attacker to bypass the lock screen and access user files. The exploitation involves removing the stylus while the device is closed and using the screen capture feature.

Impact

Exploitation of this vulnerability allows for bypassing the lock screen, enabling unauthorized access to user files.