Product by Cloudflare
Cloudflare Quiche
9 known vulnerabilities in Cloudflare Quiche (Cloudflare), 0 of them actively exploited (CISA KEV).
Key figures
9
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2025-4821 | Incorrect congestion window growth by invalid ACK ranges | 7.5 | |
| High | CVE-2026-12523 | Resource exhaustion in quiche HTTP/3 and QPACK layers | 7.5 | |
| High | CVE-2026-12707 | Unbounded path event queue growth in quiche via peer-driven source connection ID rotation | 7.5 | |
| High | CVE-2024-1765 | Unlimited resource allocation by QUIC CRYPTO frames flooding in quiche | 5.9 | |
| High | CVE-2025-7054 | Infinite loop triggered by connection ID retirement | 6.5 | |
| Medium | CVE-2025-4820 | Incorrect congestion window growth by optimistic ACK | 5.3 | |
| Medium | CVE-2023-6193 | Unbounded queuing of path validation messages in cloudflare-quiche | 5.3 | |
| Medium | CVE-2026-11941 | Use-after-free in connection ID iterator and FFI functions | 5.6 | |
| Medium | CVE-2024-1410 | Unbounded storage of information related to connection ID retirement, in quiche | 3.7 |