9.8Kritisch
CVE-2025-6179ChromeOS Extension Disablement and Developer Mode Bypass via ExtHang3r and ExtPrint3r Exploits
Beschreibung
Permissions Bypass in Extension Management in Google ChromeOS 16181.27.0 on managed Chrome devices allows a local attacker to disable extensions and access Developer Mode, including loading additional extensions via exploiting vulnerabilities using the ExtHang3r and ExtPrint3r tools.
Schwachstellentyp (CWE):
CWE-276
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
Referenzen und Patches
- https://issuetracker.google.com/issues/399652193 ExploitIssue Tracking
- https://issues.chromium.org/issues/b/399652193 Broken Link
CPE-Treffer (NVD) (1)
cpe:2.3:o:google:chrome_os:16181.27.0:*:*:*:*:*:*:*