6.5Mittel
CVE-2025-1704
Beschreibung
ComponentInstaller Modification in ComponentInstaller in Google ChromeOS 15823.23.0 on Chromebooks allows enrolled users with local access to unenroll devices and intercept device management requests via loading components from the unencrypted stateful partition.
Schwachstellentyp (CWE):
CWE-416
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
Referenzen und Patches
- https://issuetracker.google.com/issues/359915523 ExploitIssue TrackingMailing List
- https://issues.chromium.org/issues/b/359915523 Broken Link
CPE-Treffer (NVD) (1)
cpe:2.3:o:google:chrome_os:15823.23.0:*:*:*:*:*:*:*