VULNERABILITY INTELLIGENCE

CVE-2022-2147

CVSS score6.5 MEDIUM
EPSS probability0.27%
CISA KEVNot currently listed
Published2022-06-23
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

Description

Cloudflare Warp for Windows from version 2022.2.95.0 contained an unquoted service path which enables arbitrary code execution leading to privilege escalation. The fix was released in version 2022.3.186.0.

Weakness classification

  • CWE-428: Unquoted Search Path or Element

Primary references