← back
CVE-2025-1566

CVE-2025-1566

CVSS 7.5 HIGHEPSS 0.2%CWE-1319
DNS Leak in Native System VPN in Google ChromeOS Dev Channel on ChromeOS 16002.23.0 allows network observers to expose plaintext DNS queries via failure to properly tunnel DNS traffic during VPN state transitions.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Google · ChromeOS

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://issues.chromium.org/issues/b/342802975https://issuetracker.google.com/issues/342802975