CVE-2025-1704: ComponentInstaller Vulnerability Allowing Chromebook Unenrollment and Potential Device Management Key Interception in ChromeOS
ComponentInstaller Modification in ComponentInstaller in Google ChromeOS 15823.23.0 on Chromebooks allows enrolled users with local access to unenroll devices and intercept device management requests via loading components from the unencrypted stateful partition.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-1704?
CVE-2025-1704 is rated as high severity due to its potential to allow unauthorized device unenrollment and interference with management requests.
How do I fix CVE-2025-1704?
To mitigate CVE-2025-1704, ensure your Google ChromeOS is updated to the latest version where the vulnerability has been addressed.
What are the potential impacts of CVE-2025-1704?
CVE-2025-1704 can allow enrolled users with local access to unenroll devices and intercept device management communications.
Who is affected by CVE-2025-1704?
CVE-2025-1704 affects users of Google ChromeOS, particularly those with local access to enrolled devices.
When was CVE-2025-1704 reported?
CVE-2025-1704 was reported in March 2025 as a security issue within Google ChromeOS.