Cloudflare vulnerabilities
66 CVEs and advisories name Cloudflare as an affected vendor, newest first. Follow it as a feed.
- CVE-2023-3747Insufficient Validation on Override Codes for Always-Enabled WARP Mode
- CVE-2023-0654Spoofing User's Activity Loads in WARP Mobile Client (Android)
- CVE-2023-0238Injecting Activity Loads in WARP Mobile Client
- CVE-2023-4241lol-html panics on certain HTML inputs
- CVE-2023-2754Plaintext transmission of DNS requests in Windows 1.1.1.1 WARP client
- CVE-2023-3766Invalid Slice Split Results in Server Panic
- CVE-2023-3348Directory traversal vulnerability in Cloudflare Wrangler
- CVE-2023-1862Remote access to warp-svc.exe in Cloudflare WARP
- CVE-2023-3040Out of Bounds Access Leading to Undefined Behavior
- CVE-2023-3036Out of Bounds Slice index in cfnts leads to remote panic
- CVE-2023-2512Buffer under-read in workerd
- CVE-2023-1732Improper random reading in CIRCL
- CVE-2023-0652Local Privilege Escalation in Cloudflare WARP Installer (Windows)
- CVE-2023-1412Local Privilege Escalation Vulnerability in WARP's MSI Installer
- CVE-2023-1314Local Privilege Escalation Vulnerability in cloudflared's Installer
- CVE-2022-4428support_uri validation missing in WARP client for Windows
- CVE-2022-4457WARP client manifest misconfiguration leading to Task Hijacking
- CVE-2022-3320Bypassing Cloudflare Zero Trust policies using warp-cli set-custom-endpoint command
- CVE-2022-3322Lock WARP switch bypass on WARP mobile client using iOS quick action
- CVE-2022-3337Lock WARP switch bypass by removing VPN profile on iOS mobile client
- CVE-2022-3321Lock WARP switch feature bypass on WARP mobile client for iOS
- CVE-2022-3512Lock WARP switch bypass using warp-cli 'add-trusted-ssid' command
- CVE-2022-3616OctoRPKI crash when maximum iterations number is reached
- CVE-2022-2529Multiple DoS Attack Vectors in sflow packet handling
- CVE-2022-2225Zero Trust Secure Web Gateway policies bypass using WARP client subcommands
- CVE-2022-2145Cloudlfare WARP Arbitrary File Overwrite
- CVE-2022-2147Unquoted Service Path in Cloudflare WARP for Windows
- CVE-2021-3912OctoRPKI crashes when processing GZIP bomb returned via malicious repository
- CVE-2021-3911Misconfigured IP address field in ROA leads to OctoRPKI crash
- CVE-2021-3910NUL character in ROA causes OctoRPKI to crash