← Back

Winlogbeat

winlogbeat

Vendor: Elastic • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Elastic
1Winlogbeat
Sep 10, 2026
Sep 1, 2026
N/A· v4
7.1 HIGH· v3
N/A· v2
A local vulnerability in the Winlogbeat Windows installer caused runtime files to be placed in a directory writable by unprivileged users. A low-privileged attacker with existing access to the system could pre-position m...Show more
A local vulnerability in the Winlogbeat Windows installer caused runtime files to be placed in a directory writable by unprivileged users. A low-privileged attacker with existing access to the system could pre-position malicious filesystem links, causing a subsequent elevated Winlogbeat operation to write to or delete arbitrary files. Successful exploitation could result in a denial of service.Show less
1Elastic
1Winlogbeat
Jun 17, 2026
Mar 25, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Winlogbeat versions before 5.6.16 and 6.6.2 had an insufficient logging flaw. An attacker able to inject certain characters into a log entry could prevent Winlogbeat from recording the event.