← Back

CVE-2025-6177

nvd nist
Published: Jun 16, 2025Modified: Jun 17, 2026

JSON object

Loading...
7.4
Vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.4 / Impact: 5.9
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Privilege Escalation in MiniOS in Google ChromeOS (16063.45.2 and potentially others) on enrolled devices allows a local attacker to gain root code execution via exploiting a debug shell (VT3 console) accessible through specific key combinations during developer mode entry and MiniOS access, even when developer mode is blocked by device policy or Firmware Write Protect (FWMP).

Affected (1)

Products: Google: Chrome Os
Google
1 product
Chrome Os
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Chrome Os
Version 16063.45.2

Related CWEs

CWE-269
Improper Privilege Management
The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

References (2)

Source: 7f6e188d-c52a-4a19-8674-3c3fa7d1fc7f
Broken Link
Source: 7f6e188d-c52a-4a19-8674-3c3fa7d1fc7f
Issue TrackingMailing List

Timeline

No history available yet.