Cloudflare Cloudflared — known CVE vulnerabilities

Every CVE whose affected-product data names Cloudflare Cloudflared, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2023-1314 — CVSS 7.5 (high): A vulnerability has been discovered in cloudflared's installer (<= 2023.3.0) for Windows 32-bits devices that allows a local attacker with…
• CVE-2020-24356 — CVSS 6.4 (medium): `cloudflared` versions prior to 2020.8.1 contain a local privilege escalation vulnerability on Windows systems. When run on a Windows…