Hi, all. I've written an osquery extension that al...
# windows
j
Hi, all. I've written an osquery extension that allows you to query devices for Windows Update / CVE / KEV data: github.com/jjhfarmer/wofa-osquery-extension
Copy code
SELECT
    s.computer_name,
    s.hardware_model,
    o.name AS windows_edition,
    o.version AS current_build,
    c.cve_id,
    c.severity,
    c.cvss_score,
    c.in_kev,
    c.patched_in_version,
    c.nist_url
FROM wofa_unpatched_cves c
JOIN system_info s ON 1=1
JOIN os_version o ON 1=1
ORDER BY c.in_kev DESC, CAST(c.cvss_score AS REAL) DESC;

+----------------+----------------+--------------------------+---------------+----------------+-----------+------------+--------+--------------------+--------------------------------------------------+
| computer_name  | hardware_model | windows_edition          | current_build | cve_id         | severity  | cvss_score | in_kev | patched_in_version | nist_url                                         |
+----------------+----------------+--------------------------+---------------+----------------+-----------+------------+--------+--------------------+--------------------------------------------------+
| DESKTOP-SQ49GE1| MS-7B86        | Microsoft Windows 11 Pro | 10.0.26200    | CVE-2026-21510 | Important | 8.8        | 1      | 10.0.26200.7840    | <https://nvd.nist.gov/vuln/detail/CVE-2026-21510> |
| DESKTOP-SQ49GE1| MS-7B86        | Microsoft Windows 11 Pro | 10.0.26200    | CVE-2026-21513 | Important | 8.8        | 1      | 10.0.26200.7840    | <https://nvd.nist.gov/vuln/detail/CVE-2026-21513> |
| DESKTOP-SQ49GE1| MS-7B86        | Microsoft Windows 11 Pro | 10.0.26200    | CVE-2026-21519 | Important | 7.8        | 1      | 10.0.26200.7840    | <https://nvd.nist.gov/vuln/detail/CVE-2026-21519> |
| DESKTOP-SQ49GE1| MS-7B86        | Microsoft Windows 11 Pro | 10.0.26200    | CVE-2026-21533 | Important | 7.8        | 1      | 10.0.26200.7840    | <https://nvd.nist.gov/vuln/detail/CVE-2026-21533> |
| DESKTOP-SQ49GE1| MS-7B86        | Microsoft Windows 11 Pro | 10.0.26200    | CVE-2026-22221 | Important | 7.8        | 1      | 10.0.26200.7462    | <https://nvd.nist.gov/vuln/detail/CVE-2026-22221> |
| DESKTOP-SQ49GE1| MS-7B86        | Microsoft Windows 11 Pro | 10.0.26200    | CVE-2025-60710 | Important | 7.8        | 1      | 10.0.26200.7171    | <https://nvd.nist.gov/vuln/detail/CVE-2025-60710> |
| DESKTOP-SQ49GE1| MS-7B86        | Microsoft Windows 11 Pro | 10.0.26200    | CVE-2025-24990 | Important | 7.8        | 1      | 10.0.26200.6899    | <https://nvd.nist.gov/vuln/detail/CVE-2025-24990> |
| DESKTOP-SQ49GE1| MS-7B86        | Microsoft Windows 11 Pro | 10.0.26200    | CVE-2025-59230 | Important | 7.8        | 1      | 10.0.26200.6899    | <https://nvd.nist.gov/vuln/detail/CVE-2025-59230> |
| DESKTOP-SQ49GE1| MS-7B86        | Microsoft Windows 11 Pro | 10.0.26200    | CVE-2025-62215 | Important | 7.0        | 1      | 10.0.26200.7171    | <https://nvd.nist.gov/vuln/detail/CVE-2025-62215> |
| DESKTOP-SQ49GE1| MS-7B86        | Microsoft Windows 11 Pro | 10.0.26200    | CVE-2026-21525 | Moderate  | 6.2        | 1      | 10.0.26200.7840    | <https://nvd.nist.gov/vuln/detail/CVE-2026-21525> |
| DESKTOP-SQ49GE1| MS-7B86        | Microsoft Windows 11 Pro | 10.0.26200    | CVE-2026-20805 | Important | 5.5        | 1      | 10.0.26200.7623    | <https://nvd.nist.gov/vuln/detail/CVE-2026-20805> |
| DESKTOP-SQ49GE1| MS-7B86        | Microsoft Windows 11 Pro | 10.0.26200    | CVE-2025-47827 | Important | 4.6        | 1      | 10.0.26200.6899    | <https://nvd.nist.gov/vuln/detail/CVE-2025-47827> |
| DESKTOP-SQ49GE1| MS-7B86        | Microsoft Windows 11 Pro | 10.0.26200    | CVE-2026-32202 | Important | 4.3        | 1      | 10.0.26200.8246    | <https://nvd.nist.gov/vuln/detail/CVE-2026-32202> |
+----------------+----------------+--------------------------+---------------+----------------+-----------+------------+--------+--------------------+--------------------------------------------------+
Let me know what you think!