Privilege Escalation in MiniOS in Google ChromeOS (16063.45.2 and potentially others) on enrolled devices allows a local attacker to gain root code execution via exploiting a debug shell (VT3 console) accessible through specific key combinations during developer mode entry and MiniOS access, even when developer mode is blocked by device policy or Firmware Write Protect (FWMP).
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://issues.chromium.org/issues/b/382540412 | Broken Link |
| https://issuetracker.google.com/issues/382540412 | Issue Tracking Mailing List |
Configurations
History
02 Jul 2025, 18:26
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://issues.chromium.org/issues/b/382540412 - Broken Link | |
| References | () https://issuetracker.google.com/issues/382540412 - Issue Tracking, Mailing List | |
| CPE | cpe:2.3:o:google:chrome_os:16063.45.2:*:*:*:*:*:*:* | |
| First Time |
Google chrome Os
|
16 Jun 2025, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-06-16 17:15
Updated : 2025-07-02 18:26
NVD link : CVE-2025-6177
Mitre link : CVE-2025-6177
JSON object : View
Products Affected
- chrome_os
CWE
No CWE.