ExpressVPN

Help us improve the security and privacy of ExpressVPN users.

  • $150 – $2,500 per vulnerability
  • Up to $100,000 maximum reward
  • Safe harbor
Submit report

In the past month, we have been focusing on split-tunneling related issues with other interesting updates.

[RELEASE] ExpressVPN for Windows 12.74.0

  • Recommended update. Split tunneling returns for all Windows users on the Version 12 app, after it was removed while we investigated a bug (see previous update).
  • We discovered and fixed another bug related to DNS requests and split tunneling—which was only an issue if other VPN apps were installed on a device. We have improved our filtering logic to further harden the security of our app when split tunneling is in use. Read more on our blog.

[RELEASE] ExpressVPN for Windows 10.74.0

  • Recommended update. We discovered and fixed a bug related to DNS requests and split tunneling—which was only an issue if other VPN apps were installed on a device. To address this issue, we improved our filtering logic to further harden the security of our app when split tunneling is in use. Read more on our blog.
  • As part of our overall security enhancements, we decided to remove split-tunneling functionality for users on older versions of Windows, for which Microsoft no longer guarantees security updates. This affects users on Win7, 8 and 8.1. It does not affect users operating Win10 and above.
  • We appreciate that this may cause inconvenience for those users who are still operating these older systems, and we seek their understanding that we make our product decisions with user privacy and security at heart. All other VPN features will still work as usual on these systems.
  • This update is recommended for all users, and required if you have other VPN apps installed on your computer.

[RELEASE] ExpressVPN for Android 11.33.0

  • In this release, we’ve fixed an issue where your VPN location might unexpectedly revert to Smart Location.

[RELEASE] ExpressVPN for tvOS 11.133.0
As of this release, you can now:

  • Block ads and trackers.
  • Mark your preferred server locations as Favorites from the home screen and the location picker.
  • Breathe easy knowing we’ve fixed a bug that was causing the app to not respond for a few seconds after launch.

[RELEASE] ExpressVPN for Aircove 4.7.0
In this release, we:

  • Added a new notification center and internet connection status indicator to the dashboard.
  • Added Lightway’s new Dynamic MTU feature which automatically adapts to your VPN connection’s path MTU. This ensures a seamless connection over varied network environments.
  • Made it easier for you to set up advanced protection features.
  • Fixed an issue that sometimes prevented firmware updates from being manually uploaded.
  • Fixed an issue that would pause progress bars whenever the browser window was in the background.
  • Fixed an issue that occasionally prevented the dashboard from loading.

As always, we hope you will keep looking for security bugs and report them on our bug bounty program. Happy hunting!

jack
jack