Description
Permissions Bypass in Extension Management in Google ChromeOS 16181.27.0 on managed Chrome devices allows a local attacker to disable extensions and access Developer Mode, including loading additional extensions via exploiting vulnerabilities using the ExtHang3r and ExtPrint3r tools.
Published: 2025-06-16
Score: 9.8 Critical
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2025-18417 Permissions Bypass in Extension Management in Google ChromeOS 16181.27.0 on managed Chrome devices allows a local attacker to disable extensions and access Developer Mode, including loading additional extensions via exploiting vulnerabilities using the ExtHang3r and ExtPrint3r tools.
History

Wed, 02 Jul 2025 18:45:00 +0000

Type Values Removed Values Added
First Time appeared Google
Google chrome Os
CPEs cpe:2.3:o:google:chrome_os:16181.27.0:*:*:*:*:*:*:*
Vendors & Products Google
Google chrome Os

Tue, 17 Jun 2025 15:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Tue, 17 Jun 2025 14:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-276
Metrics cvssV3_1

{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}

Mon, 16 Jun 2025 17:15:00 +0000

Type Values Removed Values Added
Description Permissions Bypass in Extension Management in Google ChromeOS 16181.27.0 on managed Chrome devices allows a local attacker to disable extensions and access Developer Mode, including loading additional extensions via exploiting vulnerabilities using the ExtHang3r and ExtPrint3r tools.
Title ChromeOS Extension Disablement and Developer Mode Bypass via ExtHang3r and ExtPrint3r Exploits
References

Subscriptions

Google Chrome Os
cve-icon MITRE

Status: PUBLISHED

Assigner: ChromeOS

Published:

Updated: 2025-06-17T14:01:39.842Z

Reserved: 2025-06-16T16:50:44.449Z

Link: CVE-2025-6179

cve-icon Vulnrichment

Updated: 2025-06-17T14:00:21.384Z

cve-icon NVD

Status : Analyzed

Published: 2025-06-16T17:15:32.053

Modified: 2025-07-02T18:23:31.617

Link: CVE-2025-6179

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses