onyx

onyx --cves cve-2023-2754

CVE-2023-2754

HIGHCloudflare
score
<0.1
cvss
7.4
epss
0.9%
published
2023-08-03
kev added
—
first seen

Cloudflare WARP client for Windows assigns IPv6 Unique Local Addresses for DNS Servers when connected over IPv6, which could potentially point to unknown devices in the local network, letting attackers view DNS queries, exploit requires IPv6 connection.

Timeline

How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.

events2023-08-03 — PublishedP2026-10-21 — Tracked by OnyxTscore2026-10-21: score <0.1<0.1epss2026-09-22: epss 0.9%2026-09-23: epss 0.9%2026-09-24: epss 0.9%2026-09-25: epss 0.9%2026-09-26: epss 0.9%2026-09-27: epss 0.9%2026-09-28: epss 0.9%2026-09-29: epss 0.9%2026-09-30: epss 0.9%2026-10-01: epss 0.9%2026-10-02: epss 0.9%2026-10-03: epss 0.9%2026-10-04: epss 0.9%2026-10-05: epss 0.9%2026-10-06: epss 0.9%2026-10-07: epss 0.9%2026-10-08: epss 0.9%2026-10-09: epss 0.9%2026-10-10: epss 0.9%2026-10-11: epss 0.9%2026-10-12: epss 0.9%2026-10-13: epss 0.9%2026-10-14: epss 0.9%2026-10-15: epss 0.9%2026-10-16: epss 0.9%2026-10-18: epss 0.9%2026-10-19: epss 0.9%2026-10-20: epss 0.9%2026-10-21: epss 0.9%0.9%mentions/day0no mentions in 30 days2026-09-22today
  1. Published
  2. Tracked by Onyx

Weaknesses

CWE-319

References 3