osquery vulnerabilities

On Windows, prior to version 5.23.1, a local unprivileged attacker can trigger a heap buffer out-of-bounds write when querying the authenticode table against a maliciously crafted binary. The vulnerability stems from publisher information parsing in the getOriginalProgramName function.

In osquery prior to version 5.23.1 on Windows, a local unprivileged attacker can cause a heap buffer out-of-bounds write when querying the processes table for a maliciously crafted process. The vulnerability is due to unchecked PEB string lengths in process command-line and current-directory reads.

In osquery prior to version 5.23.1, an unprivileged attacker can read the contents of files during an ongoing file carve because temporary directories are not created with private permissions. If the carve targets a directory controlled by the attacker, arbitrary file reads are possible, including sensitive local files.