← back
CVE-2025-1704

CVE-2025-1704

CVSS 6.5 MEDIUMEPSS 0.2%CWE-416
ComponentInstaller Modification in ComponentInstaller in Google ChromeOS 15823.23.0 on Chromebooks allows enrolled users with local access to unenroll devices and intercept device management requests via loading components from the unencrypted stateful partition.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected products
Google · ChromeOS

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://issues.chromium.org/issues/b/359915523https://issuetracker.google.com/issues/359915523