CVE-2025-1566

Published: Apr 16, 2025Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

DNS Leak in Native System VPN in Google ChromeOS Dev Channel on ChromeOS 16002.23.0 allows network observers to expose plaintext DNS queries via failure to properly tunnel DNS traffic during VPN state transitions.

Affected (1)

Products: Google: Chrome Os

Google

1 product

Chrome Os

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Google Chrome Os	Version 16002.23.0

Related CWEs

CWE-1319

Improper Protection against Electromagnetic Fault Injection (EM-FI)

The device is susceptible to electromagnetic fault injection attacks, causing device internal information to be compromised or security mechanisms to be bypassed.

References (2)

https://issues.chromium.org/issues/b/342802975

Source: 7f6e188d-c52a-4a19-8674-3c3fa7d1fc7f

Broken Link

https://issuetracker.google.com/issues/342802975

Source: 7f6e188d-c52a-4a19-8674-3c3fa7d1fc7f

Issue TrackingMailing List

Timeline

No history available yet.