https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 15:44:38 +0000 https://cve.radiocsirt.org/vuln/cve-2019-3567 <p><strong>Affected:</strong> Facebook osquery</p> <p>In some configurations an attacker can inject a new executable path into the extensions.load file for osquery and hard link a parent folder of a malicious binary to a folder with known &#39;safe&#39; permissions. Under those circumstances osquery will load said malicious executable with SYSTEM permissions. The solution is to migrate installations to the &#39;Program Files&#39; directory on Windows which restricts unprivileged write access. This issue affects osquery prior to v3.4.0.</p> <p><strong>Affected:</strong> Facebook osquery</p> <p>In some configurations an attacker can inject a new executable path into the extensions.load file for osquery and hard link a parent folder of a malicious binary to a folder with known &#39;safe&#39; permissions. Under those circumstances osquery will load said malicious executable with SYSTEM permissions. The solution is to migrate installations to the &#39;Program Files&#39; directory on Windows which restricts unprivileged write access. This issue affects osquery prior to v3.4.0.</p> https://cve.radiocsirt.org/vuln/cve-2019-3567