adguard records
11 published records for vendor adguard.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 54.5%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-20 Improper Input Validation1
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-269 Improper Privilege Management1
- CWE-284 Improper Access Control1
- CWE-287 Improper Authentication1
- CWE-330 Use of Insufficiently Random Values1
The weakness classes this vendor ships most often: where to look.
CWEAll records
11 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2026-32136Proof of concept | AdGuard Home: HTTP/2 Cleartext (h2c) Upgrade Authentication Bypassadguard · adguardhome · CWE-287 | Critical9.8 | — | 0.8% | Mar 11, 2026 |
35Monitor | CVE-2024-36586No exploit | An issue in AdGuardHome v0.93 to latest allows unprivileged attackers to escalate privileges via overwriting the AdGuardHome binary.CWE-269 | High8.8 | — | 0.2% | Jun 13, 2024 |
31Monitor | CVE-2021-27935No exploit | An issue was discovered in AdGuard before 0.105.2.adguard · adguard home · CWE-522 | High7.5 | — | 4.9% | Mar 3, 2021 |
31Monitor | CVE-2022-45770Proof of concept | Improper input validation in adgnetworkwfpdrv.sys in Adguard For Windows x86 through 7.11 allows local privilege escalation.adguard · adguard · CWE-20 | High7.8 | — | 0.6% | Jan 26, 2023 |
30Monitor | CVE-2023-41173No exploit | AdGuard DNS before 2.2 allows remote attackers to cause a denial of service via malformed UDP packets.adguard · adguard dns · CWE-400 | High7.5 | — | 0.8% | Aug 25, 2023 |
28Monitor | CVE-2026-24902No exploit | TrustTunnel has SSRF and private network restriction bypass via numeric address destinationsadguard · trusttunnel · CWE-918 | High7.1 | — | 0.2% | Jan 29, 2026 |
25Monitor | CVE-2026-47703No exploit | AdGuard Home: DoQ-to-UDP State Reduction and Source-Port Oracleadguard · adguardhome · CWE-330 | Medium6.3 | — | 0.1% | Jul 15, 2026 |
22Monitor | CVE-2025-51497No exploit | An issue was discovered in AdGuard plugin before 1.11.22 for Safari on MacOS.adguard · adguard for safari · CWE-532 | Medium5.5 | — | 0.1% | Jul 17, 2025 |
21Monitor | CVE-2022-32175No exploit | In AdGuardHome, versions v0.95 through v0.108.0-b.13 are vulnerable to Cross-Site Request Forgery (CSRF), in the custom filtering rules funcadguard · adguardhome · CWE-352 | Medium5.4 | — | 0.3% | Oct 11, 2022 |
21Monitor | CVE-2026-24904No exploit | TrustTunnel has `client_random_prefix` rule bypass via fragmented or partial TLS ClientHelloadguard · trusttunnel · CWE-284 | Medium5.3 | — | 0.2% | Jan 29, 2026 |
19Monitor | CVE-2024-36814No exploit | An arbitrary file read vulnerability in Adguard Home before v0.107.52 allows authenticated attackers to access arbitrary files as root on thCWE-22 | Medium4.9 | — | 0.7% | Oct 8, 2024 |
- CVE-2026-3213639Monitor
AdGuard Home: HTTP/2 Cleartext (h2c) Upgrade Authentication Bypass
CriticalCVSS 9.8Proof of conceptEPSS 0%adguard · adguardhomeMar 11, 2026
- CVE-2024-3658635Monitor
An issue in AdGuardHome v0.93 to latest allows unprivileged attackers to escalate privileges via overwriting the AdGuardHome binary.
HighCVSS 8.8No exploitEPSS 0%Jun 13, 2024
- CVE-2021-2793531Monitor
An issue was discovered in AdGuard before 0.105.2.
HighCVSS 7.5No exploitEPSS 4%adguard · adguard homeMar 3, 2021
- CVE-2022-4577031Monitor
Improper input validation in adgnetworkwfpdrv.sys in Adguard For Windows x86 through 7.11 allows local privilege escalation.
HighCVSS 7.8Proof of conceptEPSS 0%adguard · adguardJan 26, 2023
- CVE-2023-4117330Monitor
AdGuard DNS before 2.2 allows remote attackers to cause a denial of service via malformed UDP packets.
HighCVSS 7.5No exploitEPSS 0%adguard · adguard dnsAug 25, 2023
- CVE-2026-2490228Monitor
TrustTunnel has SSRF and private network restriction bypass via numeric address destinations
HighCVSS 7.1No exploitEPSS 0%adguard · trusttunnelJan 29, 2026
- CVE-2026-4770325Monitor
AdGuard Home: DoQ-to-UDP State Reduction and Source-Port Oracle
MediumCVSS 6.3No exploitEPSS 0%adguard · adguardhomeJul 15, 2026
- CVE-2025-5149722Monitor
An issue was discovered in AdGuard plugin before 1.11.22 for Safari on MacOS.
MediumCVSS 5.5No exploitEPSS 0%adguard · adguard for safariJul 17, 2025
- CVE-2022-3217521Monitor
In AdGuardHome, versions v0.95 through v0.108.0-b.13 are vulnerable to Cross-Site Request Forgery (CSRF), in the custom filtering rules func
MediumCVSS 5.4No exploitEPSS 0%adguard · adguardhomeOct 11, 2022
- CVE-2026-2490421Monitor
TrustTunnel has `client_random_prefix` rule bypass via fragmented or partial TLS ClientHello
MediumCVSS 5.3No exploitEPSS 0%adguard · trusttunnelJan 29, 2026
- CVE-2024-3681419Monitor
An arbitrary file read vulnerability in Adguard Home before v0.107.52 allows authenticated attackers to access arbitrary files as root on th
MediumCVSS 4.9No exploitEPSS 0%Oct 8, 2024