Known Vulnerabilities for Warp by Cloudflare
Listed below are 10 of the newest known vulnerabilities associated with "Warp" by "Cloudflare".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-26178 json | Integer size truncation in Windows Advanced Rasterization Platform (WARP) allows an unauthorized attacker to elevate privileg... | Not Provided | 2026-04-14 | 2026-04-22 |
| CVE-2023-3747 json | Zero Trust Administrators have the ability to disallow end users from disabling WARP on their devices. Override codes can als... | 5.5 - MEDIUM | 2023-09-07 | 2023-09-13 |
| CVE-2023-2754 json | The Cloudflare WARP client for Windows assigns loopback IPv4 addresses for the DNS Servers, since WARP acts as local DNS serv... | 6.8 - MEDIUM | 2023-08-03 | 2023-08-09 |
| CVE-2023-1862 json | Cloudflare WARP client for Windows (up to v2023.3.381.0) allowed a malicious actor to remotely access the warp-svc.exe binar... | 7.3 - HIGH | 2023-06-20 | 2023-06-29 |
| CVE-2023-1412 json | An unprivileged (non-admin) user can exploit an Improper Access Control vulnerability in the Cloudflare WARP Client for Windo... | 7.8 - HIGH | 2023-04-05 | 2023-11-07 |
| CVE-2023-0654 json | Due to a misconfiguration, the WARP Mobile Client (< 6.29) for Android was susceptible to a tapjacking attack. In the event t... | 3.7 - LOW | 2023-08-29 | 2023-09-01 |
| CVE-2023-0652 json | Due to a hardlink created in the ProgramData folder during the repair process of the software, the installer (MSI) of WARP Cl... | 7.8 - HIGH | 2023-04-06 | 2023-11-07 |
| CVE-2023-0238 json | Due to lack of a security policy, the WARP Mobile Client (<=6.29) for Android was susceptible to this vulnerability which all... | 5.5 - MEDIUM | 2023-08-29 | 2023-09-01 |
| CVE-2022-4457 json | Due to a misconfiguration in the manifest file of the WARP client for Android, it was possible to a perform a task hijacking ... | 5.5 - MEDIUM | 2023-01-11 | 2023-11-07 |
| CVE-2022-4428 json | support_uri parameter in the WARP client local settings file (mdm.xml) lacked proper validation which allowed for privilege e... | 8 - HIGH | 2023-01-11 | 2023-11-07 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Cloudflare | Warp | 1.2.2695.1 | |||
| Application | Cloudflare | Warp | - |