Vulnerabilities > Tailscale
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-03-23 | CVE-2023-28436 | Improper Privilege Management vulnerability in Tailscale Tailscale is software for using Wireguard and multi-factor authentication (MFA). | 8.0 |
| 2022-11-23 | CVE-2022-41924 | Origin Validation Error vulnerability in Tailscale A vulnerability identified in the Tailscale Windows client allows a malicious website to reconfigure the Tailscale daemon `tailscaled`, which can then be used to remotely execute code. | 9.6 |
| 2022-11-23 | CVE-2022-41925 | Cross-Site Request Forgery (CSRF) vulnerability in Tailscale A vulnerability identified in the Tailscale client allows a malicious website to access the peer API, which can then be used to access Tailscale environment variables. | 8.8 |