osquery
SQL powered operating system instrumentation, monitoring, and analytics.
Ethical Research & Authorized Use Only Compliance Notice
This security utility is indexed for educational purposes, defensive penetration testing, vulnerability reproduction, and authorized red team engagements. Unauthorized utilization against networks without prior explicit consent violates international cybersecurity regulations.
Description
SQL powered operating system instrumentation, monitoring, and analytics.
Raw Intelligence Data
SQL powered operating system instrumentation, monitoring, and analytics.
Release History
5.23.1
24 Jun 2026 5.23.1This is a bug and security fix release.
What's Changed
Fixes
- Fix heap buffer overflow in Windows
processestable by @seph in https://github.com/osquery/osquery/pull/8934 - Fix heap buffer overflow in Windows
authenticodetable by @seph in https://github.com/osquery/osquery/pull/8923 - Fix use-after-free in Linux
process_file_events implementationby @zwass in https://github.com/osquery/osquery/pull/8950 - Fix incorrect permissions on temporary file carve directories by @zwass in https://github.com/osquery/osquery/pull/8961
- Fix documentation for
process_open_handlestable by @seph in https://github.com/osquery/osquery/pull/8853 - Fix
subject2andissuer2columns for Windowscertificatestable by @getvictor in https://github.com/osquery/osquery/pull/8963
Full Changelog: https://github.com/osquery/osquery/compare/5.23.0...5.23.1