Read the docs

CrowdStrike

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

CrowdStrike records in CISA KEV

No CrowdStrike vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

6 records

Priority MEDIUM 50

CrowdStrike has released security updates to address a critical unauthenticated path traversal vulnerability (CVE-2026-40050) in LogScale.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00597 Published 2026-04-21 No fix listed CWE-22
Priority MEDIUM 47

A vulnerability was found in CrowdStrike Falcon 6.31.14505.0/6.42.15610/6.44.15806.

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.04999 Published 2022-08-22 No fix listed CWE-862
Priority LOW 37

CrowdStrike uses industry-standard TLS (transport layer security) to secure communications from the Falcon sensor to the CrowdStrike cloud.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00261 Published 2025-02-12 Fixed in 7.21.17405, 7.20.17308 +35 CWE-296
Priority LOW 28

A logic error exists in the Falcon sensor for Windows that could allow an attacker, with the prior ability to execute code on a host, to delete arbitrary files.

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.00178 Published 2025-10-08 Fixed in 7.28.20008, 7.27.19909 +4 CWE-346
Priority LOW 24

A race condition exists in the Falcon sensor for Windows that could allow an attacker, with the prior ability to execute code on a host, to delete arbitrary files.

CVSS 3.1MEDIUM 5.6 Local Low privileges No interaction EPSS 0.00126 Published 2025-10-08 Fixed in 7.28.20008, 7.27.19909 +4 CWE-367
Open these records in search →