CVE-2020-11081: Linuxfoundation Osquery

High severity, CVSS 8.2. EPSS: 0.6% chance of exploitation in the next 30 days.

osquery before version 4.4.0 enables a privilege escalation vulnerability. If a Window system is configured with a PATH that contains a user-writable directory then a local user may write a zlib1.dll DLL, which osquery will attempt to load. Since osquery runs with elevated privileges this enables local escalation. This is fixed in version 4.4.0.

Affected products

• Linuxfoundation Osquery: before 4.4.0 (fixed in 4.4.0)

Published 2020-07-10. Last modified 2026-06-17.