Skip to content
OpenAdvisories

Vendor

osquery

5 known vulnerabilities.

Products

osquery 5
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.4
    CVE-2026-46388

    osquery: Unprivileged users can temporarily read file carve contents

    osquery is a SQL powered operating system instrumentation, monitoring, and analytics framework. Prior to 5.23.1, an unprivileged attacker can read the contents of an osquery file carve until the carve completes and the temporary files are deleted because in-p…

    osquery osquery
  • Medium 5.2
    CVE-2020-26273

    sqlite ATTACH allows some filesystem access

    osquery is a SQL powered operating system instrumentation, monitoring, and analytics framework. In osquery before version 4.6.0, by using sqlite's ATTACH verb, someone with administrative access to osquery can cause reads and writes to arbitrary sqlite databa…

    osquery osquery
  • Medium 5.3
    CVE-2020-11081

    osquery susceptible to DLL search order hijacking of zlib1.dll

    osquery before version 4.4.0 enables a privilege escalation vulnerability. If a Window system is configured with a PATH that contains a user-writable directory then a local user may write a zlib1.dll DLL, which osquery will attempt to load. Since osquery runs…

    osquery osquery