Collected research

A bug that affects million users - Kaspersky VPN

A bug that affects million users

Dhiraj Mishra · inputzero.io

Kaspersky VPN for Android up to 1.4.0.216 left DNS queries outside the tunnel, so the user's real DNS resolver still saw every domain requested while connected to a virtual server. The traffic a VPN user expects to hide stayed visible to their ISP resolver; Kaspersky fixed it without a bounty.

Record

Document

A bug that affects million users

Researcher

Dhiraj Mishra

Published by

inputzero.io

Topic

Other

In the archive

• Collected in the 2018 research round

Tags

• info-leak
• dns
• android
• case-study
• bug-bounty

This page is the archive's own catalogue record. The research is the work of Dhiraj Mishra, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 11 August 2026.