CrowdStrike vulnerabilities
We track 3 vulnerabilities in CrowdStrike products across 6 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on September 15, 2026.
Latest CrowdStrike vulnerabilities
- 8.8 High severity
Falcon sensor for Windows: Time-of-check Time-of-use (TOCTOU) Race Condition
CrowdStrike released a security update to address a vulnerability in the Falcon sensor for Windows. The vulnerability only exists when the Microsoft Office File Malicious Macro Removal Windows policy setting is enabled and customers remain protected through th
- 9.8 Critical severity
LogScale Self-Hosted: Improper Limitation of a Pathname to a Restricted Directory
CrowdStrike has released security updates to address a critical unauthenticated path traversal vulnerability (CVE-2026-40050) in LogScale. This vulnerability only requires mitigation by customers that host specific versions of LogScale and does not affect Next
- 8.1 High severity
Falcon sensor for Linux: Improper Following of a Certificate's Chain of Trust
CrowdStrike uses industry-standard TLS (transport layer security) to secure communications from the Falcon sensor to the CrowdStrike cloud. CrowdStrike has identified a validation logic error in the Falcon sensor for Linux, Falcon Kubernetes Admission Controll