CVE-2022-2147

Cloudflare Warp for Windows from version 2022.2.95.0 contained an unquoted service path which enables arbitrary code execution leading to privilege escalation. The fix was released in version 2022.3.186.0.

Score

CVSS 3.1 7.8 High

Status

Modified - cna@cloudflare.com

Published

2022-06-23

Last modified

2024-08-03

Weaknesses

CWE-428

Affected products

• Warp (Cloudflare)

References

• https://github.com/cloudflare/advisories/security/advisories/GHSA-m6w8-3pf9-p68r