CVE-2025-1704

Опубликовано: 16 апр. 2025

Источник: nvd

CVSS3: 6.5

EPSS Низкий

Описание

ComponentInstaller Modification in ComponentInstaller in Google ChromeOS 15823.23.0 on Chromebooks allows enrolled users with local access to unenroll devices and intercept device management requests via loading components from the unencrypted stateful partition.

Ссылки

https://issues.chromium.org/issues/b/359915523
Broken Link
https://issuetracker.google.com/issues/359915523
Exploit
Issue Tracking
Mailing List

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:o:google:chrome_os:15823.23.0:*:*:*:*:*:*:*

EPSS

Процентиль: 10%

0.00198

Низкий

6.5 Medium

CVSS3

Дефекты

CWE-416

Связанные уязвимости

GHSA-mhjg-qmr3-w2xc

CVSS3: 9.8

github

больше 1 года назад

ComponentInstaller Modification in ComponentInstaller in Google ChromeOS 124.0.6367.34 on Chromebooks allows enrolled users with local access to unenroll devices and intercept device management requests via loading components from the unencrypted stateful partition.

BDU:2025-05277