Vulnerability Database

309,136

Total vulnerabilities in the database

CVE-2025-1704

ComponentInstaller Modification in ComponentInstaller in Google ChromeOS 15823.23.0 on Chromebooks allows enrolled users with local access to unenroll devices and intercept device management requests via loading components from the unencrypted stateful partition.

  • Published: Apr 16, 2025
  • Updated: Nov 16, 2025
  • CVE: CVE-2025-1704
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 6.5
  • AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWEs:

Software From Fixed in
google / chrome_os 15823.23.0 15823.23.0.x