CVE-2018-25241: Vpnbrowser VPN Browser+

High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days.

VPN Browser+ 1.1.0.0 contains a denial of service vulnerability that allows unauthenticated attackers to crash the application by submitting oversized input through the search functionality. Attackers can paste a large buffer of characters into the search bar to trigger an unhandled exception that terminates the application.

Affected products

Published 2026-04-04. Last modified 2026-07-21.