DNS Leak in Native System VPN in Google ChromeOS Dev Channel on ChromeOS 16002.23.0 allows network observers to expose plaintext DNS queries via failure to properly tunnel DNS traffic during VPN state transitions.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HGoogle Chrome Os
OSGoogle16002.23.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
VPN
CWE
Related vulnerabilities
CVE-2016-4171CRITICAL9.8⚠ KEVPL ✓same product
RCE w Adobe Flash Player 21.0.0.242 i wcześniejszych — aktywnie exploitowany
CVE-2016-1019CRITICAL9.8⚠ KEVPL ✓same product
Adobe Flash Player — RCE lub DoS przez nieokreślone wektory ataku
CVE-2014-0497CRITICAL9.8⚠ KEVPL ✓same product
Adobe Flash Player — Integer Underflow umożliwiający zdalne wykonanie kodu (RCE)
CVE-2026-17680CRITICAL9.6PL ✓same product
Heap buffer overflow w Color w Google Chrome na ChromeOS — sandbox escape
CVE-2025-6179CRITICAL9.8PL ✓same product
Ominięcie uprawnień w zarządzaniu rozszerzeniami Google ChromeOS