CrowdStrike Releases Fixes for Two Falcon Sensor for Windows Vulnerabilities (CVE-2025-42701 & CVE-2025-42706)

CrowdStrike has released security updates to fix two Falcon Sensor for Windows vulnerabilities, CVE-2025-42701 and CVE-2025-42706, which could enable deletion of arbitrary files after prior local code execution. According to CrowdStrike, the flaws arise from a race condition and a logic error within the Windows version of the Falcon Sensor, and there is currently no evidence of exploitation in the wild.

The fixes cover Falcon Sensor for Windows versions 7.28 and earlier, with updates available across builds including 7.28.20008 and later, 7.27.19909, 7.26.19813, 7.25.19707, 7.24.19608, and 7.16.18637 (Windows 7 / 2008 R2 only). An additional 7.24 hotfix serves as an update for the Long-Term Visibility sensor in Windows IoT environments.

CrowdStrike notes that these flaws do not directly enable remote code execution but could destabilise system functionality or disable security mechanisms, and it confirms that Falcon Sensor for macOS, Linux and Legacy Windows systems are not affected.