https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 19:28:04 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-49645 EUVD-2026-49645 https://cve.radiocsirt.org/vuln/euvd-2026-49645 https://cve.radiocsirt.org/vuln/fkie_cve-2019-3567 <p>In some configurations an attacker can inject a new executable path into the extensions.load file for osquery and hard link a parent folder of a malicious binary to a folder with known &#39;safe&#39; permissions. Under those circumstances osquery will load said malicious executable with SYSTEM permissions. The solution is to migrate installations to the &#39;Program Files&#39; directory on Windows which restricts unprivileged write access. This issue affects osquery prior to v3.4.0.</p> <p>In some configurations an attacker can inject a new executable path into the extensions.load file for osquery and hard link a parent folder of a malicious binary to a folder with known &#39;safe&#39; permissions. Under those circumstances osquery will load said malicious executable with SYSTEM permissions. The solution is to migrate installations to the &#39;Program Files&#39; directory on Windows which restricts unprivileged write access. This issue affects osquery prior to v3.4.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-3567 https://cve.radiocsirt.org/vuln/ghsa-96gq-m97m-9ppg <p>In some configurations an attacker can inject a new executable path into the extensions.load file for osquery and hard link a parent folder of a malicious binary to a folder with known &#39;safe&#39; permissions. Under those circumstances osquery will load said malicious executable with SYSTEM permissions. The solution is to migrate installations to the &#39;Program Files&#39; directory on Windows which restricts unprivileged write access. This issue affects osquery prior to v3.4.0.</p> <p>In some configurations an attacker can inject a new executable path into the extensions.load file for osquery and hard link a parent folder of a malicious binary to a folder with known &#39;safe&#39; permissions. Under those circumstances osquery will load said malicious executable with SYSTEM permissions. The solution is to migrate installations to the &#39;Program Files&#39; directory on Windows which restricts unprivileged write access. This issue affects osquery prior to v3.4.0.</p> https://cve.radiocsirt.org/vuln/ghsa-96gq-m97m-9ppg https://cve.radiocsirt.org/vuln/gsd-2019-3567 gsd-2019-3567 https://cve.radiocsirt.org/vuln/gsd-2019-3567