Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Cloudflare Component: Cloudflared Clear all filters
TI-2023-01241 CVE-2023-1314 · GHSA-7mjv-x3jf-545x

Local Privilege Escalation Vulnerability in cloudflared's Installer

Priority LOW 36

A vulnerability has been discovered in cloudflared's installer (<= 2023.3.0) for Windows 32-bits devices that allows a local attacker with no administrative permissions to escalate their privileges on the affected device…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00259 Published 2023-03-21 Fixed in 0.0.0-20230313153246-f686da832f85 CWE-59
TI-2020-14903 CVE-2020-24356 · GHSA-hgwp-4vp4-qmm2

Local Privilege Escalation in cloudflared

Priority LOW 34

`cloudflared` versions prior to 2020.8.1 contain a local privilege escalation vulnerability on Windows systems.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00348 Published 2020-10-02 Fixed in 2020.8.1, 0.0.0-20200820025921-9323844ea773 CWE-427