CrowdStrike
Security Risk Profile
65
/100
highSecurity Risk Score
Comprehensive risk assessment based on 8 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from August 22, 2022 to present
8
Total CVEs
2
Critical+High
1
Exploited
2
Unpatched
Threat Assessment
Avg CVSS
6.4
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
2
Critical/High
Risk Level
65/100
high
⚠️ 1 Active Exploits⚡ 1 Zero-Days
Severity Distribution
Critical
1High
1Medium
3Low
1Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
Path Traversal
1
2
Race Condition
1
Most Affected Products
1. CrowdStrike Falcon4
2. CrowdStrike Falcon Sensor for Windows2
3. CrowdStrike Falcon Endpoint Detection and Response (EDR)1
4. Kandji Kandji Mobile Device Management (MDM) / Kandji Agent1
5. Apple macOS1
Recent Vulnerabilities
See more →darkreading-20260624120000
unknown
Apple's MacOS Gap Lets Users Disable Security Tools
6/24/2026⚠ Exploited🔧 No Patch
CVE-2026-40050
CVSS 9.8critical
CrowdStrike LogScale Unauthenticated Path Traversal
4/21/2026🔧 No Patch
CVE-2025-42701
CVSS 5.6medium
CrowdStrike Falcon Sensor for Windows Race Condition
10/8/2025🔧 No Patch
CVE-2025-42706
CVSS 6.5medium
CrowdStrike Falcon Sensor for Windows Logic Error
10/8/2025🔧 No Patch
CVE-2025-37728
CVSS 5.4medium
Kibana Insufficiently Protected Credentials in the CrowdStrike Connector
10/7/2025🔧 No Patch
CVE-2025-1146
CVSS 8.1high
CrowdStrike Falcon Sensor for Linux TLS Issue
2/12/2025🔧 No Patch
https://www.bleepingcomputer.com/news/security/lazarus-hackers-exploited-windows-zero-day-to-gain-kernel-privileges/
unknown
Lazarus hackers exploited Windows zero-day to gain Kernel privileges
2/28/2024⚡ Zero-Day🔧 No Patch
CVE-2022-2841
CVSS 2.7low
CrowdStrike Falcon Uninstallation authorization
8/22/2022🔧 No Patch
Monitor CrowdStrike in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.