High · 7.5 CVE-2025-1566 EUVD-2025-11529GHSA-gm22-hqvw-7j52

DNS Leak in Native System VPN in Google ChromeOS Dev Channel on ChromeOS 16002.23.0 allows network observers to expose plaintext DNS querie…

Published Apr 16, 2025 · Updated May 8, 2025 · Assigned by ChromeOS

Description

DNS Leak in Native System VPN in Google ChromeOS Dev Channel on ChromeOS 16002.23.0 allows network observers to expose plaintext DNS queries via failure to properly tunnel DNS traffic during VPN state transitions.

Affected products

Vendor	Product	Affected	Fixed
Google	ChromeOS	16002.23.0 – < 16002.23.0	16002.23.0

References

https://issuetracker.google.com/issues/342802975
https://issues.chromium.org/issues/b/342802975