CrowdStrike

CrowdStrike security advisories for the Falcon sensor, LogScale, and other CrowdStrike products.

5 changes, newest first

HighVulnerabilityDate unknown

Vulnerability Affecting Office Macro Removal in CrowdStrike Falcon Sensor for Windows

CVE-2026-40058 · CVSS 8.8 · Impact: High — CrowdStrike released a security update to address a vulnerability in the Falcon sensor for Windows. The vulnerability only exists when the Microsoft Office File Malicious Macro Removal Windows policy setting is enabled and customers remain protected through the Cloud Anti-malware for Microsoft Office Files settings. An update is available immediately for versions 7.34 and…

CrowdStrike security advisories ↗

#crowdstrike#psirt#security#cve

HighVulnerabilityDate unknown

CrowdStrike LogScale Unauthenticated Path Traversal

CVE-2026-40050 · CVSS 9.8 · Vendor rating: Critical — CrowdStrike has released security updates to address a critical unauthenticated path traversal vulnerability in LogScale. This vulnerability only requires mitigation by customers that host specific versions of LogScale and does not affect Next-Gen SIEM customers. The vulnerability exists in a specific cluster API endpoint that, if exposed, allows a remote attacker to…

CrowdStrike security advisories ↗

#crowdstrike#psirt#security#cve

MediumVulnerabilityDate unknown

Issues Affecting CrowdStrike Falcon Sensor for Windows

CVE-2025-42701, CVE-2025-42706 — We have released fixes for two issues affecting the Falcon sensor for Windows. Both of these issues require an adversary to have previously established the ability to execute code on the host, and could allow them to delete arbitrary files. The fixes for both issues are in the latest Falcon sensor for Windows version 7.29, in hotfix releases for versions 7.24 through 7.28, and in a…

CrowdStrike security advisories ↗

#crowdstrike#psirt#cve

HighVulnerabilityDate unknown

CrowdStrike Falcon Sensor for Linux TLS Issue

CVE-2025-1146 · CVSS 8.1 · Impact: High — CrowdStrike uses industry-standard TLS (transport layer security) to secure communications from the Falcon sensor to the CrowdStrike cloud. CrowdStrike has identified a validation logic error in the Falcon sensor for Linux, Falcon Kubernetes Admission Controller, and Falcon Container Sensor where our TLS connection routine to the CrowdStrike cloud can incorrectly process…

CrowdStrike security advisories ↗

#crowdstrike#psirt#security#cve

MediumVulnerabilityDate unknown

Falcon Sensor for Windows Uninstall with Elevated Privileges

CVE-2022-2841 — A vulnerability was found in CrowdStrike Falcon 6.31.14505.0/6.42.15610/6.44.15806.

CrowdStrike security advisories ↗

#crowdstrike#psirt#cve