CVE Program partner
StrongDM
StrongDM
CVEs, 365 days15 all time, 0 rejected
Quality100%median 99%
CVSS by the CNA100%share of records
CWE100%share of records
Affected versions100%not n/a or unspecified
CVSS added by CISA0%lower is better
| Organisation | StrongDM |
| Role | CNA |
| Type | Vendor |
| Reports to | mitre |
| Scope | StrongDM issues only. |
| Advisories | https://www.strongdm.com/security/advisories |
Latest CVEs · RSS
- CVE-2026-4387 2026-05-29 · CVSS 2.0StrongDM Desktop Application before 23.74.0 (Desktop Client before 53.77.0) on Microsoft Windows stores authentication state, including a JSON Web Token and asy
- CVE-2025-6183 2025-08-20 · CVSS 7.0The StrongDM macOS client incorrectly processed JSON-formatted messages. Attackers could potentially modify macOS system configuration by crafting a malicious J
- CVE-2025-6182 2025-08-20 · CVSS 8.5The StrongDM Windows service incorrectly handled communication related to system certificate management. Attackers could exploit this behavior to install untrus
- CVE-2025-6181 2025-08-20 · CVSS 8.5The StrongDM Windows service incorrectly handled input validation. Authenticated attackers could potentially exploit this leading to privilege escalation.
- CVE-2025-6180 2025-08-20 · CVSS 8.5The StrongDM Client insufficiently protected a pre-authentication token. Attackers could exploit this to intercept and reuse the token, potentially redeeming va