CVE-2025-1704

Medium CVSS: 6.5

ComponentInstaller Modification in ComponentInstaller in Google ChromeOS 15823.23.0 on Chromebooks allows enrolled users with local access to unenroll devices
and intercept device management requests via loading components from the unencrypted stateful partition.

Vendor

Google

Product

Chrome Os

CWE

CWE-416

Yayın Tarihi

2025-04-16 23:15:44

Güncelleme

2025-07-11 14:15:07

Source Identifier

7f6e188d-c52a-4a19-8674-3c3fa7d1fc7f

KEV Date Added

Kategoriler

CWE-416 Chrome Os MEDIUM Google 2025

Referanslar

https://issues.chromium.org/issues/b/359915523 https://issuetracker.google.com/issues/359915523

Benzer Kayıtlar

High

CVE-2026-5292

Out of bounds read in WebCodecs in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to perform an out of…

Medium

CVE-2026-5291

Inappropriate implementation in WebGL in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to obtain poten…

Critical

CVE-2026-5290

Use after free in Compositing in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the…

Critical

CVE-2026-5289

Use after free in Navigation in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the…

Critical

CVE-2026-5288

Use after free in WebView in Google Chrome on Android prior to 146.0.7680.178 allowed a remote attacker who had compromi…

High

CVE-2026-5287

Use after free in PDF in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code insid…