PT-2025-41295 · Crowdstrike · Crowdstrike Falcon Sensor For Windows

Cong Cheng · Publicado 2025-10-08 · Atualizado 2025-11-15 · CVE-2025-42706

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Falcon sensor for Windows versions prior to 7.24

Description A logic error in the Falcon sensor for Windows could allow an attacker, with existing code execution capabilities on a host, to delete arbitrary files. There is no indication of exploitation in the wild. The Falcon sensor for Mac, the Falcon sensor for Linux and the Falcon sensor for Legacy Systems are not affected. The issue was discovered through a bug bounty program.

Recommendations Update Falcon sensor for Windows to version 7.24 or later.

Correção

Origin Validation Error

Enumeração de Fraquezas

CWE-346

Identificadores relacionados

BDU:2026-04834

CVE-2025-42706

Produtos afetados

Crowdstrike Falcon Sensor For Windows

Referências · 17

• https://twitter.com/Komodosec/status/1989528674958544913 · Publicação no Twitter
• https://reddit.com/r/HasambaShared/comments/1o26v6z/headline_crowdstrike_falcon_sensor_windows · Publicação no Reddit
• https://reddit.com/r/pwnhub/comments/1o2li2z/crowdstrike_falcon_vulnerabilities_allow_file · Publicação no Reddit
• https://nvd.nist.gov/vuln/detail/CVE-2025-42706 · Nota de Segurança
• https://twitter.com/windowsforum/status/1976269698170818578 · Publicação no Twitter
• https://t.me/pentestingnews/69304 · Publicação no Telegram
• https://twitter.com/autumn_good_35/status/1976130318651490774 · Publicação no Twitter
• https://twitter.com/CVEnew/status/1975980437781819751 · Publicação no Twitter
• https://twitter.com/OSINTAFRICA89/status/1976251485907452056 · Publicação no Twitter
• https://twitter.com/hasamba/status/1976288181809983576 · Publicação no Twitter
• https://twitter.com/dailytechonx/status/1976762161558175835 · Publicação no Twitter
• https://t.me/CVEtracker/34470 · Publicação no Telegram
• https://reddit.com/r/crowdstrike/comments/1o1h1ep/situational_awareness_cve202542701_cve202542706 · Publicação no Reddit
• https://twitter.com/VulmonFeeds/status/1976072276358373549 · Publicação no Twitter
• https://crowdstrike.com/en-us/security-advisories/issues-affecting-crowdstrike-falcon-sensor-for-windows · Nota