Astra Linux – Vulnerability in SQLite3

The flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN where the right-hand side is a view. This can lead to a NULL pointer dereference or incorrect results...

CVE-2026-69867

Out-of-bounds read in SQLite allows an authorized attacker to elevate privileges locally...

CVE-2026-69867

An out-of-bounds read vulnerability exists in SQLite , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability is documented as having a High severity base score of 7.8. No specific affected versions, underlying root causes, or remediation steps are prov...

sqlite-fts5-securedel

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · sqlite-fts5-securedel sqlite-fts5-securedel Class: Crash Reach: Local SQLite 3.53.4 b09c88c14082339b66c7b7158d609a771e64ca69 - Hwaci fts5DoSecureDelete rebuilds an FTS5 leaf footer with sqlite3Fts5PutVarint after nPg ...

SQLite Elevation of Privilege Vulnerability

Out-of-bounds read in SQLite allows an authorized attacker to elevate privileges locally...

gryph

AI coding agents have no security boundaries. Gryph is building one. Everyone runs YOLO mode. Gryph enforces guardrails and keeps the audit trail. Quick Start · Demo · Supported Agents · Use Cases · Security Policy AI coding agents Claude Code, Cursor, Windsurf, Gemini CLI, OpenCode can read any...

Microsoft Windows: CVE-2026-69867: SQLite Elevation of Privilege Vulnerability

Out-of-bounds read in SQLite allows an authorized attacker to elevate privileges locally...

CVE-2026-69867: Out-of-bounds Read

Out-of-bounds read in SQLite allows an authorized attacker to elevate privileges locally...

Siemens RUGGEDCOM CROSSBOW Station Access Controller

SUMMARY RUGGEDCOM CROSSBOW Station Access Controller SAC contains multiple vulnerabilities in the integrated SQLite component that could allow an attacker to execute arbitrary code, cause a denial of service, or obtain sensitive information. Siemens has released a new version for RUGGEDCOM...

DEBIAN-CVE-2026-109347

Adminer before 6.1.1 contains a remote code execution vulnerability that allows authenticated SQLite users to bypass ATTACH and VACUUM INTO restrictions by prefixing statements with a UTF-8 byte-order mark. Attackers can attach a database file at a PHP-served path and create a table named with PH...

CVE-2026-109347

Adminer before 6.1.1 contains a remote code execution vulnerability that allows authenticated SQLite users to bypass ATTACH and VACUUM INTO restrictions by prefixing statements with a UTF-8 byte-order mark. Attackers can attach a database file at a PHP-served path and create a table named with PH...

UBUNTU-CVE-2026-109347

Adminer before 6.1.1 contains a remote code execution vulnerability that allows authenticated SQLite users to bypass ATTACH and VACUUM INTO restrictions by prefixing statements with a UTF-8 byte-order mark. Attackers can attach a database file at a PHP-served path and create a table named with PH...

CVE-2026-109347

Adminer before 6.1.1 contains a remote code execution vulnerability that allows authenticated SQLite users to bypass ATTACH and VACUUM INTO restrictions by prefixing statements with a UTF-8 byte-order mark. Attackers can attach a database file at a PHP-served path and create a table named with PH...

CVE-2026-109347

The Adminer software (versions before 6.1.1 ) is vulnerable to a Remote Code Execution (RCE) flaw when using SQLite . The root cause is a bypass of ATTACH and VACUUM INTO restrictions, achieved by prefixing statements with a UTF-8 byte-order mark . Authenticated users can exploit this to attach a...

CVE-2026-109347 Adminer before 6.1.1 RCE via UTF-8 BOM SQLite ATTACH Bypass

Adminer before 6.1.1 contains a remote code execution vulnerability that allows authenticated SQLite users to bypass ATTACH and VACUUM INTO restrictions by prefixing statements with a UTF-8 byte-order mark. Attackers can attach a database file at a PHP-served path and create a table named with PH...

EUVD-2026-97649

Adminer before 6.1.1 contains a remote code execution vulnerability that allows authenticated SQLite users to bypass ATTACH and VACUUM INTO restrictions by prefixing statements with a UTF-8 byte-order mark. Attackers can attach a database file at a PHP-served path and create a table named with PH...

CVE-2026-109347 Adminer before 6.1.1 RCE via UTF-8 BOM SQLite ATTACH Bypass

Adminer before 6.1.1 contains a remote code execution vulnerability that allows authenticated SQLite users to bypass ATTACH and VACUUM INTO restrictions by prefixing statements with a UTF-8 byte-order mark. Attackers can attach a database file at a PHP-served path and create a table named with PH...

CVE-2026-109347

Adminer before 6.1.1 contains a remote code execution vulnerability that allows authenticated SQLite users to bypass ATTACH and VACUUM INTO restrictions by prefixing statements with a UTF-8 byte-order mark. Attackers can attach a database file at a PHP-served path and create a table named with PH...

Malware in @revizahoshii/hoshino-store-sqlite

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2026-17832 Malicious code in @revizahoshii/hoshino-store-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5be1bfeb40b1b25c136a73036ef88cd35ed77e2662ca3e69235b4c3b081ff9cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...