CrowdStrike Falcon Sensor for Windows Logic Error and Race Condition Vulnerabilities (CVE-2025-42701/42706)

Key Information Vulnerability Overview Description: CrowdStrike has released fixes for two issues affecting the Windows version of the Falcon sensor. These issues require an attacker to already have code execution capabilities on the host in order to allow them to delete arbitrary files. Affected Versions: Windows versions 7.29 and earlier are affected. Impact Stability and Functionality: Exploiting these issues may lead to stability and functionality problems with the CrowdStrike Falcon Windows sensor or other system software, including the operating system. Unaffected Platforms: Falcon sensors for Mac, Linux, and legacy Windows systems are not affected. Technical Overview Vulnerability Type: A logic error exists that allows an attacker with code execution on the host to delete arbitrary files. CVE Numbers: - CVE-2025-42701: CrowdStrike Falcon Sensor for Windows Race Condition - CVE-2025-42706: CrowdStrike Falcon Sensor for Windows Logic Error Severity CVSS Score: - CVE-2025-42701: 6.5 (MEDIUM) - CVE-2025-42706: 5.5 (MEDIUM) Vulnerability Types and Impact Vulnerability Types: - Time-check-Time-of-use (TOCTOU) Race Condition - Origin Validation Error - Signature Spoof Exploitation Status Current Status: CrowdStrike has not observed any signs of these vulnerabilities being exploited in the wild, but is actively monitoring for any abuse or exploitation attempts. Performance Impact Expected Impact: No direct impact on sensor performance is expected. Affected Host Identification Query Resource: Customers can use queries available on GitHub to identify affected hosts. Remediation Recommended Action: Customers should upgrade Windows hosts running affected sensor versions to the patched versions. Resources Detailed Information: Links to detailed information for each CVE and related resources are provided.

Goal Reached Thanks to every supporter — we hit 100%!

CrowdStrike Falcon Sensor for Windows Logic Error and Race Condition Vulnerabilities (CVE-2025-42701/42706)