CrowdStrike vulnerabilities

Products

• Falcon sensor for Windows 3
• Falcon 1
• Falcon Container Sensor 1
• Falcon Kubernetes Admission Controller 1
• Falcon sensor for Linux 1
• Laroux Cleanup Tool 1
• LogScale Self-Hosted 1

Latest CrowdStrike CVEs

Newest publication first

1. CVE-2026-40058 Vulnerability Affecting Office Macro Removal in CrowdStrike Falcon Sensor for Windows

   Published 2026-09-15

   High·CVSS 8.8 EPSS 0.08%

   CrowdStrike released a security update to address a vulnerability in the Falcon sensor for Windows. The vulnerability only exists when the Microsoft Office File Malicious Macro Removal Windows policy setting is enabled and customers remain protected through the Cloud Anti-malware...

2. CVE-2026-40050 CrowdStrike LogScale Unauthenticated Path Traversal

   Published 2026-04-21

   Critical·CVSS 9.8 EPSS 0.60%

   CrowdStrike has released security updates to address a critical unauthenticated path traversal vulnerability (CVE-2026-40050) in LogScale. This vulnerability only requires mitigation by customers that host specific versions of LogScale and does not affect Next-Gen SIEM customers....

3. CVE-2025-42701 CrowdStrike Falcon Sensor for Windows Race Condition

   Published 2025-10-08

   Medium·CVSS 5.6 EPSS 0.13%

   A race condition exists in the Falcon sensor for Windows that could allow an attacker, with the prior ability to execute code on a host, to delete arbitrary files. CrowdStrike released a security fix for this issue in Falcon sensor for Windows versions 7.24 and above and all Long...

4. CVE-2025-42706 CrowdStrike Falcon Sensor for Windows Logic Error

   Published 2025-10-08

   Medium·CVSS 6.5 EPSS 0.18%

   A logic error exists in the Falcon sensor for Windows that could allow an attacker, with the prior ability to execute code on a host, to delete arbitrary files. CrowdStrike released a security fix for this issue in Falcon sensor for Windows versions 7.24 and above and all Long Te...

5. CVE-2025-1146 CrowdStrike Falcon Sensor for Linux TLS Issue

   Published 2025-02-12

   High·CVSS 8.1 EPSS 0.26%

   CrowdStrike uses industry-standard TLS (transport layer security) to secure communications from the Falcon sensor to the CrowdStrike cloud. CrowdStrike has identified a validation logic error in the Falcon sensor for Linux, Falcon Kubernetes Admission Controller, and Falcon Conta...

6. CVE-2022-2841 CrowdStrike Falcon Uninstallation authorization

   Published 2022-08-22

   Low·CVSS 2.7 EPSS 5.1% Public exploit

   A vulnerability was found in CrowdStrike Falcon 6.31.14505.0/6.42.15610/6.44.15806. It has been classified as problematic. Affected is an unknown function of the component Uninstallation Handler. The manipulation leads to missing authorization. It is possible to launch the attack...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.