cloudflare Latest High & Critical Vulnerabilities
Latest High & Critical vulnerabilities published by cloudflare
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Flaw in Seed Decryption Logic in Cloudflare's Gokey
CVE-2025-13353CloudflareGokey7.1HIGHInfinite Loop Vulnerability in Cloudflare quiche QUIC Implementation
CVE-2025-7054CloudflareQuiche8.7HIGHIncorrect Congestion Window Growth in Cloudflare Quiche
CVE-2025-4821CloudflareQuiche7.5HIGHServer-Side Request Forgery in Open Next Cloudflare Adapter
CVE-2025-6087Cloudflare7.8HIGHRequest Smuggling Vulnerability in Pingora Proxy Framework
CVE-2025-4366Cloudflare7.4HIGHOut of Bounds Read/Write Vulnerability in JPEG XL Encoder by Cloudflare
CVE-2024-11403CloudflareLibJXL9.8CRITICALUnlimited Resource Allocation Vulnerability Affects Cloudflare Quiche
CVE-2024-1765CloudflareQuiche7.5HIGHServer-Side Request Forgery (SSRF) in Miniflare
CVE-2023-7078CloudflareMiniflare7.5HIGHArbitrary remote code execution within wrangler dev Workers sandbox
CVE-2023-7080Cloudflarewrangler8.5HIGHlol-html panics on certain HTML inputs
CVE-2023-4241CloudflareLol-html7.5HIGHPlaintext transmission of DNS requests in Windows 1.1.1.1 WARP client
CVE-2023-2754CloudflareWarp7.4HIGHRemote access to warp-svc.exe in Cloudflare WARP
CVE-2023-1862CloudflareWarp Client7.3HIGHOut of Bounds Slice index in cfnts leads to remote panic
CVE-2023-3036Cloudflarecfnts7.5HIGHOut of Bounds Access Leading to Undefined Behavior
CVE-2023-3040Cloudflarelua-resty-json7.5HIGHLocal Privilege Escalation in Cloudflare WARP Installer (Windows)
CVE-2023-0652CloudflareWarp7HIGHLocal Privilege Escalation Vulnerability in WARP's MSI Installer
CVE-2023-1412CloudflareWarp7HIGHLocal Privilege Escalation Vulnerability in cloudflared's Installer
CVE-2023-1314CloudflareCloudflared7.5HIGHsupport_uri validation missing in WARP client for Windows
CVE-2022-4428CloudflareWarp8.9HIGHMultiple DoS Attack Vectors in sflow packet handling
CVE-2022-2529CloudflareGoflow7.5HIGHZero Trust Secure Web Gateway policies bypass using WARP client subcommands
CVE-2022-2225CloudflareWarp8.1HIGHArbitrary filepath traversal via URI injection
CVE-2021-3907CloudflareOctorpki7.4HIGHOctoRPKI lacks contextual out-of-bounds check when validating RPKI ROA maxLength values
CVE-2021-3761CloudflareOctorpki7.5HIGHArbitrary Code Execution Vulnerability in Cloudflare-Scrape by Anorov
CVE-2017-7235Cloudflare-scrape...Cloudflare-scrape8.8HIGH