Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Priority MEDIUM 50

CrowdStrike has released security updates to address a critical unauthenticated path traversal vulnerability (CVE-2026-40050) in LogScale.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00597 Published 2026-04-21 No fix listed CWE-22
Priority LOW 24

A race condition exists in the Falcon sensor for Windows that could allow an attacker, with the prior ability to execute code on a host, to delete arbitrary files.

CVSS 3.1MEDIUM 5.6 Local Low privileges No interaction EPSS 0.00126 Published 2025-10-08 Fixed in 7.28.20008, 7.27.19909 +4 CWE-367
Priority LOW 28

A logic error exists in the Falcon sensor for Windows that could allow an attacker, with the prior ability to execute code on a host, to delete arbitrary files.

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.00178 Published 2025-10-08 Fixed in 7.28.20008, 7.27.19909 +4 CWE-346
Priority LOW 37

CrowdStrike uses industry-standard TLS (transport layer security) to secure communications from the Falcon sensor to the CrowdStrike cloud.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00261 Published 2025-02-12 Fixed in 7.21.17405, 7.20.17308 +35 CWE-296
Priority MEDIUM 47

A vulnerability was found in CrowdStrike Falcon 6.31.14505.0/6.42.15610/6.44.15806.

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.04999 Published 2022-08-22 No fix listed CWE-862