What’s Vulnerable › Vulnerabilities

CVE-2025-1704

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2025-04-16 · updated 2026-06-17
• Weakness: CWE-416

Description

ComponentInstaller Modification in ComponentInstaller in Google ChromeOS 15823.23.0 on Chromebooks allows enrolled users with local access to unenroll devices and intercept device management requests via loading components from the unencrypted stateful partition.

Affected products

• Google ChromeOS: 15823.23.0

References

• https://issues.chromium.org/issues/b/359915523
• https://issuetracker.google.com/issues/359915523

Get alerted when CVE-2025-1704 or the next vulnerability affects your stack