Known Vulnerabilities for products from Cloudflare
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Cloudflare".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-128122 json | Not Provided | 2026-11-13 | 2026-11-13 | |
| CVE-2026-121730 json | Not Provided | 2026-11-03 | 2026-11-07 | |
| CVE-2026-121450 json | Not Provided | 2026-11-03 | 2026-11-07 | |
| CVE-2026-119498 json | Not Provided | 2026-11-07 | 2026-11-07 | |
| CVE-2026-108555 json | Not Provided | 2026-10-10 | 2026-10-13 | |
| CVE-2026-107913 json | Not Provided | 2026-10-14 | 2026-10-14 | |
| CVE-2026-106457 json | Not Provided | 2026-10-06 | 2026-10-07 | |
| CVE-2026-105299 json | Not Provided | 2026-10-20 | 2026-10-20 | |
| CVE-2026-105298 json | Not Provided | 2026-10-20 | 2026-10-20 | |
| CVE-2026-105297 json | Not Provided | 2026-10-20 | 2026-10-20 | |
| CVE-2026-12523 json | Summary Cloudflare quiche's HTTP/3 layer was discovered to be vulnerable to resource exhaustion (i.e., memory) by means of... | Not Provided | 2026-07-14 | 2026-10-24 |
| CVE-2025-13353 json | In gokey versions <0.2.0, a flaw in the seed decryption logic resulted in passwords incorrectly being derived solely from t... | Not Provided | 2025-12-02 | 2026-11-13 |
| CVE-2024-0212 json | 6.5 - MEDIUM | 2024-01-29 | 2024-02-02 | |
| CVE-2023-7080 json | 8 - HIGH | 2023-12-29 | 2024-01-05 | |
| CVE-2023-7079 json | 5.7 - MEDIUM | 2023-12-29 | 2024-01-05 | |
| CVE-2023-7078 json | 8.1 - HIGH | 2023-12-29 | 2024-01-05 | |
| CVE-2023-4241 json | lol-html can cause panics on certain HTML inputs. Anyone processing arbitrary 3rd party HTML with the library is affected. | 7.5 - HIGH | 2023-08-16 | 2023-08-22 |
| CVE-2023-3766 json | A vulnerability was discovered in the odoh-rs rust crate that stems from faulty logic during the parsing of encrypted queries... | 5.9 - MEDIUM | 2023-08-03 | 2023-08-10 |
| CVE-2023-3747 json | Zero Trust Administrators have the ability to disallow end users from disabling WARP on their devices. Override codes can als... | 5.5 - MEDIUM | 2023-09-07 | 2023-09-13 |
| CVE-2023-3348 json | The Wrangler command line tool (<[email protected] or <[email protected]) was affected by a directory traversal vulnerability... | 5.7 - MEDIUM | 2023-08-03 | 2023-08-29 |
Known software with vulnerabilities from Cloudflare
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Cloudflare | Warp | - |