Medium severity6.5NVD Advisory· Published Apr 16, 2025· Updated Jun 17, 2026

CVE-2025-1704

Description

ComponentInstaller Modification in ComponentInstaller in Google ChromeOS 15823.23.0 on Chromebooks allows enrolled users with local access to unenroll devices and intercept device management requests via loading components from the unencrypted stateful partition.

Affected products

Google/Chromecpe-rescue
Range: 15823.23.0
Google/ChromeOSllm-fuzzy2 versions
15823.23.0+ 1 more
- (no CPE)range: 15823.23.0
- cpe:2.3:o:google:chrome_os:15823.23.0:*:*:*:*:*:*:*
Google/Chromebooksllm-create
Range: 15823.23.0

Patches

Vulnerability mechanics

References

issuetracker.google.com/issues/359915523nvdExploitIssue TrackingMailing List
issues.chromium.org/issues/b/359915523nvdBroken Link

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000