CyberSecBulletin

Expressvpn vulnerabilities

We track 1 vulnerability in Expressvpn products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on February 11, 2024.

1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score

Latest Expressvpn vulnerabilities

  • 7.5 High severity

    expressvpn: Insecure Storage of Sensitive Information

    CVE-2024-25728Expressvpn

    ExpressVPN before 12.73.0 on Windows, when split tunneling is used, sends DNS requests according to the Windows configuration (e.g., sends them to DNS servers operated by the user's ISP instead of to the ExpressVPN DNS servers), which may allow remote attacker