Out of Bound Vulnerability in Velociraptor's Prefetch Library
CVE-2026-77797

3.6LOW

Key Information:

Vendor

Rapid7

Status
Velociraptor
Vendor
CVE Published:
24 September 2026

What is CVE-2026-77797?

The Velociraptor prefetch library is susceptible to an out of bound vulnerability that can lead to instability, causing a crash when it attempts to parse malformed prefetch files. This issue highlights the importance of validating input files to ensure software resilience and security.

Affected Version(s)

Velociraptor Windows 0 < 0.77.3

References

http://docs.velociraptor.app/announcements/advisories/cve...
https://github.com/Velocidex/go-prefetch/commit/4bae97962...

CVSS V3.1

Score:
3.6
Severity:
LOW
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Yuval Miller and Leon Kayaliev
.