CVE-2025-6177
HIGH EPSS 0.4%
Published Jun 16, 20251y ago · Modified Jun 17, 20261w ago
7.4 CVSS 3.1
Published Jun 16, 2025 1y ago
Last Modified Jun 17, 2026 1w ago
Description
Privilege Escalation in MiniOS in Google ChromeOS (16063.45.2 and potentially others) on enrolled devices allows a local attacker to gain root code execution via exploiting a debug shell (VT3 console) accessible through specific key combinations during developer mode entry and MiniOS access, even when developer mode is blocked by device policy or Firmware Write Protect (FWMP).
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Attack Vector Local
Attack Complexity High
Privileges Required None
User Interaction None
Scope Unchanged
Confidentiality High
Integrity High
Availability High
Threat Intelligence
EPSS Exploit Probability
0.4% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available
Weaknesses 1
CWE-269 Improper Privilege Management Authorization
Affected Products 1
| Vendor | Product | Version | Range |
|---|---|---|---|
| chrome_os | 16063.45.2 | any |
References 2
- issues.chromium.org https://issues.chromium.org/issues/b/382540412
- issuetracker.google.com https://issuetracker.google.com/issues/382540412
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.