CVE-2018-25241 HIGH

CVE-2018-25241: VPN Browser+ 1.1.0.0 Denial of Service

Vendor Vpnbrowser
Product VPN Browser+
Weakness CWE-306 · Missing auth
Published April 4, 2026
Last update April 6, 2026
View on NVD All CVEs

CVSS base score

8.7/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

What the vulnerability does

01Description

VPN Browser+ 1.1.0.0 contains a denial of service vulnerability that allows unauthenticated attackers to crash the application by submitting oversized input through the search functionality. Attackers can paste a large buffer of characters into the search bar to trigger an unhandled exception that terminates the application.

Key dates

02Disclosure timeline

April 4, 2026 CVE published
April 6, 2026 Record updated