Advisories · Technology
Cloudflare WARP.
Every CVE that names Cloudflare WARP among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.1 Medium
File symlink abuse might lead to deleting files belonging to SYSTEM user
- Cloudflare WARP
- Privilege escalation
- CVSS 7.4 High
Plaintext transmission of DNS requests in Windows 1.1.1.1 WARP client
- Cloudflare WARP
- Weak cryptography or TLS
- CVSS 7.0 High
Local Privilege Escalation in Cloudflare WARP Installer (Windows)
- Cloudflare WARP
- Path traversal
- CVSS 7.0 High
Local Privilege Escalation Vulnerability in WARP's MSI Installer
- Cloudflare WARP
- Path traversal
- CVSS 8.9 High
support_uri validation missing in WARP client for Windows
- Cloudflare WARP
- CWE-20
- CVSS 5.5 Medium
WARP client manifest misconfiguration leading to Task Hijacking
- Cloudflare WARP
- Information disclosure
- CVSS 6.7 Medium
Bypassing Cloudflare Zero Trust policies using warp-cli set-custom-endpoint command
- Cloudflare WARP
- Broken access control
- CVSS 6.7 Medium
Lock WARP switch bypass on WARP mobile client using iOS quick action
- Cloudflare WARP
- Broken access control
- CVSS 6.7 Medium
Lock WARP switch bypass by removing VPN profile on iOS mobile client
- Cloudflare WARP
- Broken access control
- CVSS 6.7 Medium
Lock WARP switch feature bypass on WARP mobile client for iOS
- Cloudflare WARP
- Broken access control
- CVSS 6.7 Medium
Lock WARP switch bypass using warp-cli 'add-trusted-ssid' command
- Cloudflare WARP
- Broken access control
- CVSS 8.1 High
Zero Trust Secure Web Gateway policies bypass using WARP client subcommands
- Cloudflare WARP
- Broken access control
- CVSS 5.8 Medium
Cloudlfare WARP Arbitrary File Overwrite
- Cloudflare WARP
- Path traversal
- CWE-20
- CVSS 6.5 Medium
Unquoted Service Path in Cloudflare WARP for Windows
- Cloudflare WARP
- CWE-428