Skip to content
OpenAdvisories
Medium · 6.5 CVE-2025-1704 EUVD-2025-11488GHSA-mhjg-qmr3-w2xc

ComponentInstaller Modification in ComponentInstaller in Google ChromeOS 15823.23.0 on Chromebooks allows enrolled users with local access …

Published Apr 16, 2025 · Updated May 8, 2025 · Assigned by ChromeOS

Description

ComponentInstaller Modification in ComponentInstaller in Google ChromeOS 15823.23.0 on Chromebooks allows enrolled users with local access to unenroll devices
and intercept device management requests via loading components from the unencrypted stateful partition.

Affected products

VendorProductAffectedFixed
Google ChromeOS 15823.23.0 – < 15823.23.0 15823.23.0

References