Skip to contentCloudflare vulnerabilities
Newest
- cloudflare warp, warp mobile client +1 moreLock WARP switch bypass on WARP mobile client using iOS quick actionCVE-2022-33226.7 Medium
- cloudflare warp, warp mobile client +1 moreLock WARP switch bypass by removing VPN profile on iOS mobile clientCVE-2022-33376.7 Medium
- cloudflare warp, warp mobile client +1 moreLock WARP switch feature bypass on WARP mobile client for iOSCVE-2022-33216.7 Medium
- cloudflare warpLock WARP switch bypass using warp-cli 'add-trusted-ssid' commandCVE-2022-35126.7 Medium
- cloudflare octorpkiOctoRPKI crash when maximum iterations number is reachedCVE-2022-3616Fix available5.4 Medium
- cloudflare goflowMultiple DoS Attack Vectors in sflow packet handlingCVE-2022-2529Fix available7.5 High
- cloudflare warpZero Trust Secure Web Gateway policies bypass using WARP client subcommandsCVE-2022-22258.1 High
- cloudflare warpCloudlfare WARP Arbitrary File OverwriteCVE-2022-21455.8 Medium
- cloudflare warpUnquoted Service Path in Cloudflare WARP for WindowsCVE-2022-21476.5 Medium
- cloudflare octorpkiImproper Preservation of Permissions in github.com/cloudflare/cfrpki/cmd/octorpkiCVE-2021-3978Fix available7.5 High
- cloudflare octorpki, debian linux +1 moreOctoRPKI crashes when processing GZIP bomb returned via malicious repositoryCVE-2021-3912Fix available4.2 Medium
- cloudflare octorpki, debian linux +1 moreInfinite certificate chain depth results in OctoRPKI running foreverCVE-2021-3908Fix available5.9 Medium
- cloudflare octorpki, debian linux +1 moreInfinite open connection causes OctoRPKI to hang foreverCVE-2021-3909Fix available4.4 Medium
- cloudflare octorpki, debian linux +1 moreNUL character in ROA causes OctoRPKI to crashCVE-2021-3910Fix available4.4 Medium
- cloudflare octorpki, debian linux +1 moreArbitrary filepath traversal via URI injectionCVE-2021-3907Fix available7.4 High
- cloudflare octorpki, debian linux +1 moreMisconfigured IP address field in ROA leads to OctoRPKI crashCVE-2021-3911Fix available4.2 Medium
- cloudflare octorpki, debian linux +1 moreOctoRPKI lacks contextual out-of-bounds check when validating RPKI ROA maxLength valuesCVE-2021-3761Fix available7.5 High
- cloudflare golz4, github.com/cloudflare/golz4 +1 moreOut-of-bounds write in github.com/cloudflare/golz4CVE-2014-125026Fix available9.8 Critical
- cloudflare warp for windows, warp +1 morePrivilege escalation through unquoted service binary path on Cloudflare WARP for WindowsCVE-2020-351524.5 Medium
- cloudflare cloudflaredLocal Privilege Escalation in cloudflaredCVE-2020-24356Fix available6.4 Medium