Velocidex vulnerabilities
4 vulnerabilities
Known vulnerabilities in Velocidex products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 2 products.
Products
2- Velociraptor2 vulnerabilities
- Winpmem2 vulnerabilities
CVE-2024-10972velocidexwinpmem
EPSS score0.16%
Velocidex WinPmem versions 4.1 and below suffer from an Improper Input Validation vulnerability whereby an attacker with admin access can trigger a BSOD with a parallel thread changing the memory’s access right under the control of the user-mode application. This is due to verification only being performed at the beginning of the routine allowing the userspace to change page permissions half way through the routine. A valid workaround is a rule to detect unauthorized loading of winpmem outside incident response operations.CVE-2024-12668velocidexwinpmemEPSS score0.21%
Velocidex WinPmem versions below 4.1 suffer from an Out of Bounds Write vulnerability. By using an IO Control, a user space program can trick the driver into writing a 0 into any chosen memory location. In conjunction with information leakage from the WinPmem driver, attackers can discover the location in memory for the g_CiOptions global symbol. This can be leveraged to disable signed driver enforcement on the target system - allowing attackers to load unsigned drivers.CVE-2026-7573www.velocidex.com/golangvelociraptor+2EPSS score0.30%
An authorization bypass (CWE-639) in the GetUserRoles gRPC API endpoint in Velocidex Velociraptor below version 0.76.5 allows any authenticated low-privilege user to retrieve the complete ACL policy (roles and permissions) for any user across all organizations by supplying targeted Name and Org parameters via a network request.CVE-2026-7572www.velocidex.com/golangvelociraptor+2EPSS score0.14%
An off-by-one error (CWE-193) in the ConsumeUnit16Array and ConsumeUnit64Array functions in Velocidex Velociraptor before version 0.76.5 on Windows and Linux allows a local attacker to cause a Denial of Service (DoS) via a process crash by providing a specially crafted .evtx file to the parse_evtx VQL plugin.