Product by Cloudflare
Cloudflare WARP
19 known vulnerabilities in Cloudflare WARP (Cloudflare), 0 of them actively exploited (CISA KEV).
Key figures
19
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2022-4428 | support_uri validation missing in WARP client for Windows | 8.9 | |
| High | CVE-2023-2754 | Plaintext transmission of DNS requests in Windows 1.1.1.1 WARP client | 7.4 | |
| High | CVE-2023-1862 | Remote access to warp-svc.exe in Cloudflare WARP | 7.3 | |
| High | CVE-2022-3512 | Lock WARP switch bypass using warp-cli 'add-trusted-ssid' command | 6.7 | |
| High | CVE-2025-0651 | File symlink abuse might lead to deleting files belonging to SYSTEM user | 7.1 | |
| Critical | CVE-2022-3320 | Bypassing Cloudflare Zero Trust policies using warp-cli set-custom-endpoint command | 6.7 | |
| High | CVE-2022-3337 | Lock WARP switch bypass by removing VPN profile on iOS mobile client | 6.7 | |
| High | CVE-2022-3321 | Lock WARP switch feature bypass on WARP mobile client for iOS | 6.7 | |
| High | CVE-2022-2225 | Zero Trust Secure Web Gateway policies bypass using WARP client subcommands | 8.1 | |
| High | CVE-2023-0652 | Local Privilege Escalation in Cloudflare WARP Installer (Windows) | 7.0 | |
| High | CVE-2023-1412 | Local Privilege Escalation Vulnerability in WARP's MSI Installer | 7.0 | |
| High | CVE-2022-3322 | Lock WARP switch bypass on WARP mobile client using iOS quick action | 6.7 | |
| High | CVE-2022-2147 | Unquoted Service Path in Cloudflare WARP for Windows | 6.5 | |
| High | CVE-2022-2145 | Cloudlfare WARP Arbitrary File Overwrite | 5.8 | |
| Medium | CVE-2023-3747 | Insufficient Validation on Override Codes for Always-Enabled WARP Mode | 5.5 | |
| Medium | CVE-2022-4457 | WARP client manifest misconfiguration leading to Task Hijacking | 5.5 | |
| High | CVE-2020-35152 | Privilege escalation through unquoted service binary path on Cloudflare WARP for Windows | 4.5 | |
| Low | CVE-2023-0654 | Spoofing User's Activity Loads in WARP Mobile Client (Android) | 3.9 | |
| Medium | CVE-2023-0238 | Injecting Activity Loads in WARP Mobile Client | 3.9 |