sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data

A flaw was found in SQLite's FTS5 full-text search extension. This vulnerability involves memory corruption, specifically an out-of-bounds read and a heap buffer overflow, which can be triggered by supplying a crafted database with malformed FTS5 page data. When an FTS5 MATCH query is executed...

irflow-timeline v1.0.12

IRFlow Timeline Native macOS forensic timeline analysis. Import, search, and investigate EVTX, CSV, XLSX, Plaso, $MFT, $J, and local AI assistant artifacts — with AI Secret Hunt and the analytics DFIR professionals actually need. Built on Electron + SQLite to handle millions of rows without...

RHEL 9 : sqlite (RHSA-2026:59956)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:59956 advisory. SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a sing...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: sqlite (UTSA-2026-104748)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104748 advisory. SQLite before 3.53.2 contains memory corruption vulnerabilities in the FTS5 full-text search extension that allow attackers to cause process crashes, memory...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: sqlite (UTSA-2026-104747)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104747 advisory. SQLite before 3.53.2 contains a heap-based buffer overflow vulnerability in the FTS5 full-text search extension that allows attackers to cause a crash or execute...

Linux Distros Unpatched Vulnerability : CVE-2026-39113

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer Overflow vulnerability in SQLite affected version source snapshots/builds containing Fossil check- in...

AlmaLinux 10 : sqlite (ALSA-2026:58927)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:58927 advisory. sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data CVE-2026-11822 sqlite: SQLite: Arbitrary code execution and crash via...

Oracle Linux 8 : sqlite (ELSA-2026-58938)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-58938 advisory. 3.26.0-21 - Fixes CVE-2026-11822 and CVE-2026-11824 Tenable has extracted the preceding description block directly from the Oracle Linux security...

AlmaLinux 9 : sqlite (ALSA-2026:58936)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:58936 advisory. sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data CVE-2026-11822 sqlite: SQLite: Arbitrary code execution and crash via...

AlmaLinux 8 : sqlite (ALSA-2026:58938)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:58938 advisory. sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data CVE-2026-11822 sqlite: SQLite: Arbitrary code execution and crash via...

Linux Distros Unpatched Vulnerability : CVE-2026-34968

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Adminer before 5.4.3 contains an arbitrary file deletion vulnerability in SQLite mode where the database- list drop action fails to validate file extensions...

MiracleLinux 8 : sqlite-3.26.0-21.el8_10 (AXSA:2026-1658:02)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1658:02 advisory. sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data CVE-2026-11822 sqlite: SQLite: Arbitrary code execution and crash vi...

CVE-2026-39113

Buffer Overflow vulnerability in SQLite affected version source snapshots/builds containing Fossil check-in 8bdc0d485e3ad0c7a1e818da66f106951d496b05cbe61d12c2c448f2f24b6d5d Git mirror 169f68ed88b34cb68f720191c64c058f2ccec508, 2026-03-11 and later snapshots/builds allows an attacker to cause a...

CVE-2026-39113

Buffer Overflow vulnerability in SQLite affected version source snapshots/builds containing Fossil check-in 8bdc0d485e3ad0c7a1e818da66f106951d496b05cbe61d12c2c448f2f24b6d5d Git mirror 169f68ed88b34cb68f720191c64c058f2ccec508, 2026-03-11 and later snapshots/builds allows an attacker to cause a...

UBUNTU-CVE-2026-39113

Buffer Overflow vulnerability in SQLite affected version source snapshots/builds containing Fossil check-in 8bdc0d485e3ad0c7a1e818da66f106951d496b05cbe61d12c2c448f2f24b6d5d Git mirror 169f68ed88b34cb68f720191c64c058f2ccec508, 2026-03-11 and later snapshots/builds allows an attacker to cause a...

DEBIAN-CVE-2026-39113

Buffer Overflow vulnerability in SQLite affected version source snapshots/builds containing Fossil check-in 8bdc0d485e3ad0c7a1e818da66f106951d496b05cbe61d12c2c448f2f24b6d5d Git mirror 169f68ed88b34cb68f720191c64c058f2ccec508, 2026-03-11 and later snapshots/builds allows an attacker to cause a...

sqlite security update

An update is available for sqlite. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list SQLite is a C library that implements an SQL database engine. A large subset ...

RLSA-2026:58927 Important: sqlite security update

SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL databas...

RLSA-2026:55601 Important: nodejs:22 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fixes: sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data CVE-2026-11822 sqlite: SQLite: Arbitrary code execution and crash...

RLSA-2026:58936 Important: sqlite security update

SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL databas...