Facebook osquery vulnerabilities

3 published CVEs name Facebook osquery among the affected products.

Critical 1High 2Medium 0Low 0Not scored 0

CVEs per yearBy the year they were published

CVE-2020-1887
Incorrect validation of the TLS SNI hostname in osquery versions after 2.9.0 and before 4.2.0 could allow an attacker to MITM osquery traffic in the absence of…
Facebook · Osquery
Critical9.1
CVE-2019-3567
In some configurations an attacker can inject a new executable path into the extensions.load file for osquery and hard link a parent folder of a malicious…
Facebook · osquery
High8.1
CVE-2018-6336
An issue was discovered in osquery. A maliciously crafted Universal/fat binary can evade third-party code signing checks. By not completing full inspection of…
Facebook · osquery
High7.8