Vulnerability Database

309,136

Total vulnerabilities in the database

CVE-2025-1566

DNS Leak in Native System VPN in Google ChromeOS Dev Channel on ChromeOS 16002.23.0 allows network observers to expose plaintext DNS queries via failure to properly tunnel DNS traffic during VPN state transitions.

  • Published: Apr 16, 2025
  • Updated: Nov 16, 2025
  • CVE: CVE-2025-1566
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWEs:

Software From Fixed in
google / chrome_os 16002.23.0 16002.23.0.x