CVE-2025-6177

Google ChromeOS (version 16063.45.2 and potentially others) contains a privilege escalation vulnerability in MiniOS on enrolled devices. A local attacker can achieve root code execution by exploiting a debug shell (VT3 console) . This console is accessible via specific key combinations during dev...

CVE-2025-6177 ChromeOS MiniOS Root Code Execution Bypass While Dev Mode Blocked

Privilege Escalation in MiniOS in Google ChromeOS 16063.45.2 and potentially others on enrolled devices allows a local attacker to gain root code execution via exploiting a debug shell VT3 console accessible through specific key combinations during developer mode entry and MiniOS access, even whe...