7.5Alta
CVE-2025-1566
Descripción
DNS Leak in Native System VPN in Google ChromeOS Dev Channel on ChromeOS 16002.23.0 allows network observers to expose plaintext DNS queries via failure to properly tunnel DNS traffic during VPN state transitions.
Debilidad (CWE):
CWE-1319
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
Referencias y parches
- https://issuetracker.google.com/issues/342802975 Issue TrackingMailing List
- https://issues.chromium.org/issues/b/342802975 Broken Link
Coincidencias CPE (NVD) (1)
cpe:2.3:o:google:chrome_os:16002.23.0:*:*:*:*:*:*:*