Known Vulnerabilities for products from Sqlite

Listed below are 20 of the newest known vulnerabilities associated with the vendor "Sqlite".

These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.

Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.

Known Vulnerabilities

CVE Shortened Description Severity Publish Date Last Modified
CVE-2026-126074 json Not Provided 2026-11-10 2026-11-10
CVE-2026-123505 json Not Provided 2026-11-08 2026-11-10
CVE-2026-119591 json SQLite before 3.54.0 contains a stack exhaustion vulnerability in countOfViewOptimization() that allows attackers to crash th... Not Provided 2026-10-30 2026-11-04
CVE-2026-119586 json SQLite command-line shell through 3.54.1 contains a command injection vulnerability in the .recover command that emits attack... Not Provided 2026-10-30 2026-11-03
CVE-2026-119379 json SQLite before 3.54.0 built with the session extension contains a heap buffer overflow vulnerability in sqlite3changeset_apply... Not Provided 2026-10-30 2026-11-03
CVE-2026-119378 json Not Provided 2026-10-30 2026-10-30
CVE-2026-119377 json SQLite before 3.54.0 contains an authorization bypass vulnerability in lookupName() that invokes the authorizer only for the ... Not Provided 2026-10-30 2026-11-05
CVE-2026-119376 json Not Provided 2026-10-30 2026-11-04
CVE-2026-119375 json SQLite before 3.54.0 contains an information disclosure vulnerability that allows attackers to read uninitialized page-cache ... Not Provided 2026-10-30 2026-11-03
CVE-2026-119374 json SQLite before 3.54.0 built with FTS5 contains a heap buffer overflow in fts5DoSecureDelete() that allows attackers to write p... Not Provided 2026-10-30 2026-11-03
CVE-2026-119373 json SQLite before 3.54.0 built with FTS5 contains a heap buffer overflow in fts5MergeRowidLists() that undersizes the output buff... Not Provided 2026-10-30 2026-11-05
CVE-2026-119372 json SQLite before 3.54.0 built with FTS3/FTS4 and SQLITE_ENABLE_FTS3_PARENTHESIS contains a use-after-free vulnerability in fts3B... Not Provided 2026-10-30 2026-11-04
CVE-2026-119371 json SQLite before 3.54.0 contains a stack exhaustion vulnerability that allows attackers to bypass the SQLITE_LIMIT_EXPR_DEPTH ne... Not Provided 2026-10-30 2026-11-03
CVE-2026-11824 json SQLite before 3.53.2 contains a heap-based buffer overflow vulnerability in the FTS5 full-text search extension that allows a... Not Provided 2026-06-09 2026-10-15
CVE-2026-11822 json SQLite before 3.53.2 contains an out-of-bounds read vulnerability in the FTS5 full-text search extension that allows attacker... Not Provided 2026-06-09 2026-10-30
CVE-2025-70873 json An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows ... Not Provided 2026-03-12 2026-10-15
CVE-2025-29088 json In SQLite 3.49.0 before 3.49.1, certain argument values to sqlite3_db_config (in the C-language API) can cause a denial of se... Not Provided 2025-04-10 2026-10-15
CVE-2025-29087 json In SQLite 3.44.0 through 3.49.0 before 3.49.1, the concat_ws() SQL function can cause memory to be written beyond the end of ... Not Provided 2025-04-07 2026-10-15
CVE-2025-6965 json There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of ... Not Provided 2025-07-15 2026-11-03
CVE-2025-3277 json An integer overflow can be triggered in SQLite’s `concat_ws()` function. The resulting, truncated integer is then used to a... Not Provided 2025-04-14 2026-10-15
Results limited to 20 most recent vulnerabilities

Known software with vulnerabilities from Sqlite

Type Vendor Product Version
ApplicationSqliteSqlite1.0

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report