By weakness (CWE)

CWE-279: related vulnerabilities

CVEs classified under CWE-279. Understanding the weakness class helps prioritize systemic fixes over one-off patches.

1 published vulnerability

• CVE-2026-46388MEDIUM 4.4

  osquery, a widely-used operating system monitoring framework, has a file permission flaw that allows unprivileged users to read sensitive data during file carve operations. When osquery extracts files (a feature called 'carving'), it creates temporary directories with overly permissive access controls. An attacker with local access can watch these temporary locations and read files being extracted before they're cleaned up—potentially including system files the attacker shouldn't be able to access. This is a local privilege escalation risk that requires an attacker to already have some level of system access and user interaction to exploit.