Browse all 6 CVE security advisories affecting CrowdStrike. AI-powered Chinese analysis, POCs, and references for each vulnerability.
CrowdStrike provides cloud-native endpoint protection and threat intelligence services, focusing on detecting and responding to sophisticated cyber threats. Historically, their products have been associated with vulnerabilities including remote code execution, cross-site scripting, and privilege escalation issues. The platform emphasizes lightweight agents and behavioral analytics, though security researchers have identified potential weaknesses in agent communication and data handling. While CrowdStrike has not experienced major public breaches, their widespread enterprise adoption makes them a high-value target for attackers. The company maintains an active disclosure program, addressing security issues promptly to maintain trust in their security posture.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-40058 | Vulnerability Affecting Office Macro Removal in CrowdStrike Falcon Sensor for Windows — Falcon sensor for Windows CWE-367 | 8.8 | High | 2026-09-15 |
| CVE-2026-40050 | CrowdStrike LogScale Unauthenticated Path Traversal — LogScale Self-Hosted CWE-306 | 9.8 | Critical | 2026-04-21 |
| CVE-2025-42701 | CrowdStrike Falcon Sensor for Windows Race Condition — Falcon sensor for Windows CWE-367 | 5.6 | Medium | 2025-10-08 |
| CVE-2025-42706 | CrowdStrike Falcon Sensor for Windows Logic Error — Falcon sensor for Windows CWE-346 | 6.5 | Medium | 2025-10-08 |
| CVE-2025-1146 | CrowdStrike Falcon Sensor for Linux TLS Issue — Falcon sensor for Linux CWE-296 | 8.1 | High | 2025-02-12 |
| CVE-2022-2841 | CrowdStrike Falcon Uninstallation authorization — Falcon CWE-862 | 2.7 | Low | 2022-08-22 |
This page lists every published CVE security advisory associated with CrowdStrike. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.