Advisories · Technology
osquery.
Every CVE that names osquery among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.0 High
osquery: Heap buffer overflow in `getProcessCurrentDirectory()` via `processes` table (Windows)
- osquery
- Memory corruption
- CVSS 7.0 High
osquery: Heap buffer overflow via `authenticode` table (Windows)
- osquery
- Memory corruption
- CVSS 4.4 Medium
osquery: Unprivileged users can temporarily read file carve contents
- osquery
- CWE-279
- CWE-378
- CVSS 5.2 Medium
sqlite ATTACH allows some filesystem access
- osquery
- Command injection
- CVSS 5.3 Medium
osquery susceptible to DLL search order hijacking of zlib1.dll
- osquery
- CWE-114