SQLite vulnerabilities

CVEs per yearBy the year they were published

1. 20231
2. 20256
3. 202614

Newest CVEs

• CVE-2026-119591

  SQLite before 3.54.0 Stack Exhaustion via countOfViewOptimization() in VALUES Clause

  SQLite · SQLite

  Medium6.8
• CVE-2026-119586

  SQLite CLI through 3.54.1 Command Injection via .recover Output

  SQLite · SQLite

  High8.5
• CVE-2026-119379

  SQLite before 3.54.0 Heap Buffer Overflow via Session Extension sessionUpdateFind()

  SQLite · SQLite

  High8.5
• CVE-2026-119378

  SQLite before 3.54.0 Use-After-Free in R-Tree nodeWrite()

  SQLite · SQLite

  Medium6.8
• CVE-2026-119377

  SQLite before 3.54.0 Authorizer Bypass via RIGHT or FULL JOIN USING

  SQLite · SQLite

  Low2.0
• CVE-2026-119376

  SQLite before 3.54.0 Stack Exhaustion via COLLATE Operator Chain

  SQLite · SQLite

  Medium6.8
• CVE-2026-119375

  SQLite before 3.54.0 Information Disclosure via WAL Page Size Mismatch

  SQLite · SQLite

  Medium6.8
• CVE-2026-119374

  SQLite before 3.54.0 Heap Buffer Overflow via FTS5 fts5DoSecureDelete()

  SQLite · SQLite

  High8.5
• CVE-2026-119373

  SQLite before 3.54.0 FTS5 Heap Buffer Overflow via fts5MergeRowidLists()

  SQLite · SQLite

  High8.5
• CVE-2026-119372

  SQLite before 3.54.0 Use-After-Free in FTS3 fts3BestSnippet() via snippet()

  SQLite · SQLite

  Medium6.8