9.8Kritik
CVE-2025-6179ChromeOS Extension Disablement and Developer Mode Bypass via ExtHang3r and ExtPrint3r Exploits
Açıklama
Permissions Bypass in Extension Management in Google ChromeOS 16181.27.0 on managed Chrome devices allows a local attacker to disable extensions and access Developer Mode, including loading additional extensions via exploiting vulnerabilities using the ExtHang3r and ExtPrint3r tools.
Zayıflık türü (CWE):
CWE-276
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
Kaynaklar ve yamalar
- https://issuetracker.google.com/issues/399652193 ExploitIssue Tracking
- https://issues.chromium.org/issues/b/399652193 Broken Link
CPE eşleşmeleri (NVD) (1)
cpe:2.3:o:google:chrome_os:16181.27.0:*:*:*:*:*:*:*