CVE-2022-2145

—

CVSS 3.1

7.8 high

EPSS

<1%p22

Published

Jun 28, 2022 (Jun 28, 2022)

Modified

Jun 17, 2026

Description

Cloudflare WARP client for Windows (up to v. 2022.5.309.0) allowed creation of mount points from its ProgramData folder. During installation of the WARP client, it was possible to escalate privileges and overwrite SYSTEM protected files.

Vendors: cloudflare
Products: warp
Weakness: CWE-20, CWE-59
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.