CrowdStrike: CVE Program partner

CVEs, 365 days25 all time, 0 rejected

Quality100%median 99%

CVSS by the CNA100%share of records

CWE100%share of records

Affected versions100%not n/a or unspecified

CVSS added by CISA0%lower is better

Organisation	CrowdStrike Holdings, Inc.
Role	CNA
Type	Vendor
Reports to	mitre
Scope	All CrowdStrike products.
Advisories	https://www.crowdstrike.com/security-advisories/

CVE-2026-40058 2026-09-15 · CVSS 8.8
CrowdStrike released a security update to address a vulnerability in the Falcon sensor for Windows. The vulnerability only exists when the Microsoft Office File
CVE-2026-40050 2026-04-21 · CVSS 9.8
CrowdStrike has released security updates to address a critical unauthenticated path traversal vulnerability (CVE-2026-40050) in LogScale. This vulnerability on
CVE-2025-42701 2025-10-08 · CVSS 5.6
A race condition exists in the Falcon sensor for Windows that could allow an attacker, with the prior ability to execute code on a host, to delete arbitrary fil
CVE-2025-42706 2025-10-08 · CVSS 6.5
A logic error exists in the Falcon sensor for Windows that could allow an attacker, with the prior ability to execute code on a host, to delete arbitrary files.
CVE-2025-1146 2025-02-12 · CVSS 8.1
CrowdStrike uses industry-standard TLS (transport layer security) to secure communications from the Falcon sensor to the CrowdStrike cloud. CrowdStrike has iden

CrowdStrike