Velocidex

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Velocidex records in CISA KEV

No Velocidex vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2024-11753 CVE-2024-12668 · GHSA-9pc9-px3j-hxmw

Velocidex WinPmem Out of Bounds Write Vulnerability

LOW 37

Velocidex WinPmem versions below 4.1 suffer from an Out of Bounds Write vulnerability.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.00211 Published 2024-12-16 No fix listed CWE-787

TI-2024-10171 CVE-2024-10972 · GHSA-q5vw-gwwh-j8r7

WinPmem Improper Input Validation vulnerability

LOW 31

Velocidex WinPmem versions 4.1 and below suffer from an Improper Input Validation vulnerability whereby an attacker with admin access can trigger a BSOD with a parallel thread changing the memory’s access right under the…

CVSS 3.1HIGH 7.3 Local High privileges No interaction EPSS 0.00163 Published 2024-12-16 No fix listed CWE-367

TI-2026-86115 CVE-2026-85737

Missing authorization in Velociraptor SQL plugin exposes server files

LOW 28

Velociraptor is a tool for collecting host-based state information using Velociraptor Query Language (VQL) queries.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00238 Published 2026-11-06 Fixed in 0.77.2 CWE-862

Open these records in search →

Critical	0
High	2
Medium	1
Low	0
No CVSS	0