CVE-2026-6052 IBM® Db2® is vulnerable to running out of memory when executing certain queries with MDC tables

🗓️ 27 May 2026 13:09:29Reported by ibmType

IBM Db2 may run out of memory on MDC table queries in versions 11.5 and 12.1.

Reporter	Title	Published	Views	Family All 13
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities have been identified in IBM DB2 shipped with IBM WebSphere Remote Server	28 May 202619:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM® Db2® is vulnerable to running out of memory when executing certain queries with MDC tables (CVE-2026-6052)	21 May 202615:36	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in IBM Db2 shipped with IBM Guardium Key Lifecycle Manager (SKLM/GKLM)	10 Jun 202610:14	–	ibm
ATTACKERKB	CVE-2026-6052	27 May 202613:09	–	attackerkb
CNNVD	IBM Db2 安全漏洞	27 May 202600:00	–	cnnvd
CVE	CVE-2026-6052	27 May 202613:09	–	cve
Tenable Nessus	IBM DB2 Multiple Vulnerabilities (7273554, 7273555, 7273556, 7273557, 7273558) (Unix)	28 May 202600:00	–	nessus
Tenable Nessus	IBM DB2 Multiple Vulnerabilities (7273554, 7273555, 7273556, 7273557, 7273558) (Windows)	28 May 202600:00	–	nessus
EUVD	EUVD-2026-32489	27 May 202613:09	–	euvd
NVD	CVE-2026-6052	27 May 202614:17	–	nvd

[
  {
    "vendor": "IBM",
    "product": "Db2",
    "versions": [
      {
        "status": "affected",
        "version": "11.5.0",
        "lessThanOrEqual": "11.5.9",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "12.1.0",
        "lessThanOrEqual": "12.1.4",
        "versionType": "semver"
      }
    ],
    "cpes": [
      "cpe:2.3:a:ibm:db2:11.5.0:*:*:*:*:*:*:*",
      "cpe:2.3:a:ibm:db2:11.5.9:*:*:*:*:*:*:*",
      "cpe:2.3:a:ibm:db2:12.1.0:*:*:*:*:*:*:*",
      "cpe:2.3:a:ibm:db2:12.1.4:*:*:*:*:*:*:*"
    ]
  }
]

Source	Link
ibm	www.ibm.com/support/pages/node/7273557

27 May 2026 13:09Current

CVSS 3.16.5

EPSS0.00047