CVE-2025-1566highCWE-1319

CVE-2025-1566: high-severity vulnerability in Google ChromeOS

Published · Updated

Follow this CVE+ Monitor ChromeOS

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.5epss 0.2%
DNS Leak in Native System VPN in Google ChromeOS Dev Channel on ChromeOS 16002.23.0 allows network observers to expose plaintext DNS queries via failure to properly tunnel DNS traffic during VPN state transitions.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Google · ChromeOS
Related CVEs — Google ChromeOS

In the same product, most dangerous first.

CVE-2025-1568HIGHCVE-2025-1568EPSS 0.4%CVE-2025-1290HIGHCVE-2025-1290EPSS 0.3%CVE-2025-1122MEDIUMCVE-2025-1122EPSS 0.2%CVE-2025-6179CRITICALChromeOS Extension Disablement and Developer Mode Bypass via ExtHang3r and ExtPrint3r ExploitsEPSS 0.2%CVE-2025-2073HIGHCVE-2025-2073EPSS 0.2%CVE-2025-1704MEDIUMCVE-2025-1704EPSS 0.2%