CVE-2022-2841

A vulnerability was found in CrowdStrike Falcon 6.31.14505.0/6.42.15610/6.44.15806. It has been classified as problematic. Affected is an unknown function of the component Uninstallation Handler. The manipulation leads to missing authorization. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 6.40.15409, 6.42.15611 and 6.44.15807 is able to address this issue. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-206880.

• CWE-862

• https://vuldb.com/?ctiid.206880Permissions Required
• https://vuldb.com/?id.206880Exploit, Third Party Advisory
• https://www.modzero.com/advisories/MZ-22-02-CrowdStrike-FalconSensor.txtExploit, Third Party Advisory
• https://www.modzero.com/modlog/archives/2022/08/22/ridiculous_vulnerability_disclosure_process_with_crowdstrike_falcon_sensor/index.htmlExploit, Third Party Advisory
• https://youtu.be/3If-Fqwx-4sExploit, Third Party Advisory
• https://vuldb.com/?ctiid.206880Permissions Required
• https://vuldb.com/?id.206880Exploit, Third Party Advisory
• https://www.modzero.com/advisories/MZ-22-02-CrowdStrike-FalconSensor.txtExploit, Third Party Advisory
• https://www.modzero.com/modlog/archives/2022/08/22/ridiculous_vulnerability_disclosure_process_with_crowdstrike_falcon_sensor/index.htmlExploit, Third Party Advisory
• https://youtu.be/3If-Fqwx-4sExploit, Third Party Advisory

Published

Aug 22, 2022

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-28390ems_usb_start_xmit in drivers/net/can/usb/ems_usb.c in the L…7.8
• CVE-2022-28391BusyBox through 1.35.0 allows remote attackers to execute ar…8.8
• CVE-2022-28394EOL Product CVE - Installer of Trend Micro Password Manager …7.8
• CVE-2022-28396Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2022-28397An arbitrary file upload vulnerability in the file upload mo…9.8
• CVE-2022-2840The Zephyr Project Manager WordPress plugin before 3.2.5 doe…9.8
• CVE-2022-28410Simple Real Estate Portal System v1.0 was discovered to cont…9.8
• CVE-2022-28411Simple Real Estate Portal System v1.0 was discovered to cont…9.8
• CVE-2022-28412Car Driving School Managment System v1.0 was discovered to c…9.8
• CVE-2022-28413Car Driving School Management System v1.0 was discovered to …9.8
• CVE-2022-28414Home Owners Collection Management System v1.0 was discovered…9.8
• CVE-2022-28415Home Owners Collection Management System v1.0 was discovered…9.8