CVE-2025-1566: DNS Leak Vulnerability in ChromeOS Android Subsystem VPN Implementation Due to Unstable WireGuard Integration
DNS Leak in Native System VPN in Google ChromeOS Dev Channel on ChromeOS 16002.23.0 allows network observers to expose plaintext DNS queries via failure to properly tunnel DNS traffic during VPN state transitions.
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2025-1566?
CVE-2025-1566 is considered a high severity vulnerability due to its potential to expose plaintext DNS queries.
How do I fix CVE-2025-1566?
To fix CVE-2025-1566, users should update their Google ChromeOS to the latest stable version immediately.
What does CVE-2025-1566 affect?
CVE-2025-1566 affects the native system VPN functionality in Google ChromeOS.
What are the implications of CVE-2025-1566?
The implications of CVE-2025-1566 include the risk of network observers capturing sensitive DNS queries.
When was CVE-2025-1566 reported?
CVE-2025-1566 was reported in early 2025, specifically related to ChromeOS version 129.0.6668.36.