Crowdstrike - vulnerabilities (CVEs)

6 CVEs in 4 products, 0 in the last 30 days, newest from 2026-09-15.

Products

CVE-2026-40058 - CVSS 8.8 (high), 2026-09-15: CrowdStrike released a security update to address a vulnerability in the Falcon sensor for Windows. The vulnerability only exists when the Microsoft Office…
CVE-2026-40050 - CVSS 9.8 (critical), 2026-04-21: CrowdStrike has released security updates to address a critical unauthenticated path traversal vulnerability (CVE-2026-40050) in LogScale. This vulnerability…
CVE-2025-42706 - CVSS 6.5 (medium), 2025-10-08: A logic error exists in the Falcon sensor for Windows that could allow an attacker, with the prior ability to execute code on a host, to delete arbitrary…
CVE-2025-42701 - CVSS 5.6 (medium), 2025-10-08: A race condition exists in the Falcon sensor for Windows that could allow an attacker, with the prior ability to execute code on a host, to delete arbitrary…
CVE-2025-1146 - CVSS 8.1 (high), 2025-02-12: CrowdStrike uses industry-standard TLS (transport layer security) to secure communications from the Falcon sensor to the CrowdStrike cloud. CrowdStrike has…
CVE-2022-2841 - CVSS 2.7 (low), 2022-08-22: A vulnerability was found in CrowdStrike Falcon 6.31.14505.0/6.42.15610/6.44.15806. It has been classified as problematic. Affected is an unknown function of…