Vulnerabilities

TI-2026-38949 CVE-2026-54000

osquery: Heap buffer overflow in `getProcessCurrentDirectory()` via `processes` table (Windows)

LOW 32

osquery is a SQL powered operating system instrumentation, monitoring, and analytics framework.

CVSS 4.0HIGH 7.0 Local Low privileges User interaction EPSS 0.00153 Published 2026-07-10 Fixed in 5.23.1 CWE-122

TI-2026-38950 CVE-2026-54001

LOW 32

osquery is a SQL powered operating system instrumentation, monitoring, and analytics framework.

CVSS 4.0HIGH 7.0 Local Low privileges User interaction EPSS 0.00153 Published 2026-07-10 Fixed in 5.23.1 CWE-122

TI-2026-34102 CVE-2026-46388

LOW 19

osquery is a SQL powered operating system instrumentation, monitoring, and analytics framework.

CVSS 3.1MEDIUM 4.4 Local Low privileges User interaction EPSS 0.00126 Published 2026-07-10 Fixed in 5.23.1 CWE-279