Vendors / PureVPN Records 7 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 3
Exploited now PureVPN records in CISA KEV No PureVPN vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 57
PureVPN Linux client 2.0.2-Productions fails to properly handle DNS queries, allowing them to bypass the VPN tunnel and be sent directly to the ISP or default DNS servers.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.0044 · Published 2024-08-25 · No fix listed CWE-200
Priority MEDIUM 51
PureVPN client applications on Linux through September 2025 mishandle firewalling.
CVSS 3.1 LOW 3.7· Network · No auth · No interaction · EPSS 0.00207 · Published 2025-09-18 · No fix listed CWE-669
Priority MEDIUM 51
PureVPN client applications on Linux through September 2025 allow IPv6 traffic to leak outside the VPN tunnel upon network events such as Wi-Fi reconnect or system resume.
CVSS 3.1 LOW 3.7· Network · No auth · No interaction · EPSS 0.00218 · Published 2025-09-18 · No fix listed CWE-669
Priority MEDIUM 45
In PureVPN 6.0.1 on macOS, HelperTool LaunchDaemon implements an unprotected XPC service that can be abused to execute system commands as root.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01483 · Published 2018-02-07 · No fix listed
Priority MEDIUM 41
PureVPN 6.0.1 for Windows suffers from a SYSTEM privilege escalation vulnerability in its "sevpnclient" service.
CVSS 3.0 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01497 · Published 2018-04-18 · No fix listed CWE-732
Priority LOW 39
An issue was discovered in PureVPN through 5.19.4.0 on Windows.
CVSS 3.0 HIGH 7.8· Local · No auth · User interaction · EPSS 0.02605 · Published 2018-02-26 · No fix listed CWE-426
Priority LOW 34
The PureVPN client before 6.1.0 for Windows stores Login Credentials (username and password) in cleartext.
CVSS 3.0 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00357 · Published 2018-10-26 · No fix listed CWE-522
Open these records in search → All records by CVSS severity
1 3 1 2 0
THREATIST.IORead the docs