Skip to content
OpenAdvisories

Vendor

CrowdStrike

6 known vulnerabilities.

CrowdStrike at a glance

Last 12 months
2
Critical · all time
1
Exploited · all time
0
Public exploit · all time
1
New vulnerabilities per month · last 12 months
0 1 1 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 1 vulnerability, 1 critical May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 1 vulnerability Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202610
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202611
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202520
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202510
Jan 202500
Dec 202400

Products

Falcon sensor for Windows 3 Laroux Cleanup Tool 1 Falcon 1 Falcon sensor for Linux 1 Falcon Kubernetes Admission Controller 1 Falcon Container Sensor 1 LogScale Self-Hosted 1

Latest advisories

  • High max 8.1
    NCSC-2025-0055 1 CVE

    Kwetsbaarheid verholpen in CrowdStrike Falcon sensor

    CrowdStrike heeft een kwetsbaarheid verholpen in zijn Falcon sensor voor Linux, Falcon Kubernetes Admission Controller, en Falcon Container Sensor.

    CrowdStrike
All Critical High Medium Low Exploited only Public exploit

6 results · Feed

  • High 8.8
    CVE-2026-40058

    Vulnerability Affecting Office Macro Removal in CrowdStrike Falcon Sensor for Windows

    CrowdStrike released a security update to address a vulnerability in the Falcon sensor for Windows. The vulnerability only exists when the Microsoft Office File Malicious Macro Removal Windows policy setting is enabled and customers remain protected through t…

    CrowdStrike Falcon sensor for Windows Laroux Cleanup Tool Windows
  • Critical 9.8
    CVE-2026-40050

    CrowdStrike LogScale Unauthenticated Path Traversal

    CrowdStrike has released security updates to address a critical unauthenticated path traversal vulnerability (CVE-2026-40050) in LogScale. This vulnerability only requires mitigation by customers that host specific versions of LogScale and does not affect Nex…

    CrowdStrike LogScale Self-Hosted
  • Medium 5.6
    CVE-2025-42701

    CrowdStrike Falcon Sensor for Windows Race Condition

    A race condition exists in the Falcon sensor for Windows that could allow an attacker, with the prior ability to execute code on a host, to delete arbitrary files. CrowdStrike released a security fix for this issue in Falcon sensor for Windows versions 7.24 a…

    CrowdStrike Falcon sensor for Windows Windows
  • Medium 6.5
    CVE-2025-42706

    CrowdStrike Falcon Sensor for Windows Logic Error

    A logic error exists in the Falcon sensor for Windows that could allow an attacker, with the prior ability to execute code on a host, to delete arbitrary files. CrowdStrike released a security fix for this issue in Falcon sensor for Windows versions 7.24 and …

    CrowdStrike Falcon sensor for Windows Windows
  • High 8.1
    CVE-2025-1146

    CrowdStrike Falcon Sensor for Linux TLS Issue

    CrowdStrike uses industry-standard TLS (transport layer security) to secure communications from the Falcon sensor to the CrowdStrike cloud. CrowdStrike has identified a validation logic error in the Falcon sensor for Linux, Falcon Kubernetes Admission Control…

    CrowdStrike Falcon sensor for Linux Falcon Container Sensor Falcon Kubernetes Admission Controller Linux
  • Low 2.7
    CVE-2022-2841 Public exploit

    CrowdStrike Falcon Uninstallation authorization

    A vulnerability was found in CrowdStrike Falcon 6.31.14505.0/6.42.15610/6.44.15806. It has been classified as problematic. Affected is an unknown function of the component Uninstallation Handler. The manipulation leads to missing authorization. It is possible…

    CrowdStrike Falcon