CVE-2025-1704

ComponentInstaller Modification in ComponentInstaller in Google ChromeOS 15823.23.0 on Chromebooks allows enrolled users with local access to unenroll devices…

Medium · published April 16, 2025

CVSS v3.1
6.5
EPSS
0%
Percentile
9.7
In the wild
Unconfirmed
What it is

ComponentInstaller Modification in ComponentInstaller in Google ChromeOS 15823.23.0 on Chromebooks allows enrolled users with local access to unenroll devices

and intercept device management requests via loading components from the unencrypted stateful partition.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00202 · 9.7th percentile
Published
2025-04-16T23:06Z
EPSS history
Timeline
  • 16 APR 23:06Z
    ComponentInstaller Modification in ComponentInstaller in Google ChromeOS 15823.23.0 on Chromebooks allows enrolled users with local access to unenroll devices…
    cvelistv5