What’s Vulnerable › Products

osquery vulnerabilities

8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your osquery version is affected

Latest osquery vulnerabilities

• CVE-2026-54001 — osquery: Heap buffer overflow via `authenticode` table (Windows) (CVSS 7.0)
• CVE-2026-54000 — osquery: Heap buffer overflow in `getProcessCurrentDirectory()` via `processes` table (Windows) (CVSS 7.0)
• CVE-2026-46388 — osquery: Unprivileged users can temporarily read file carve contents (CVSS 4.4)
• CVE-2020-26273 — sqlite ATTACH allows some filesystem access (CVSS 5.2)
• CVE-2020-11081 — osquery susceptible to DLL search order hijacking of zlib1.dll (CVSS 8.2)
• CVE-2020-1887 — (CVSS 9.1)
• CVE-2019-3567 — (CVSS 8.1)
• CVE-2018-6336 — (CVSS 7.8)