Velocidex vulnerabilities

Products

• Velociraptor 3
• Winpmem 2

Newest

• rapid7 velociraptor Velociraptor: Low-priv analyst reads arbitrary server files via ungated sql() VQL plugin CVE-2026-85737 6.5 MediumNovember 6, 2026
• rapid7 velociraptor Velociraptor EVTX Parser — Process Crash via Crafted .evtx File CVE-2026-7572 Fix available 4.4 MediumMay 6, 2026
• rapid7 velociraptor GetUserRoles API endpoint allows any authenticated user to enumerate ACL policies across all organizations CVE-2026-7573 Fix available 5.0 MediumMay 6, 2026
• velocidex winpmem Velocidex WinPmem Out of Bounds Write Vulnerability CVE-2024-12668 8.2 HighDecember 16, 2024
• velocidex winpmem WinPmem Improper Input Validation vulnerability CVE-2024-10972 7.3 HighDecember 16, 2024