CVE-2026-78404

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to a local privilege escalation via the db2pd utility...

CVE-2026-78404 IBM® Db2® is vulnerable to local privilege escalation via the db2pd utility

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to a local privilege escalation via the db2pd utility...

EUVD-2026-97764

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to a local privilege escalation via the db2pd utility...

CVE-2026-78404

IBM Db2 is vulnerable to local privilege escalation via the db2pd utility due to Improper Privilege Management (CWE-269). This issue affects the Server edition on Linux and Unix platforms for versions 11.5.0 through 11.5.9 and 12.1.0 through 12.1.5 . Windows platforms are not affected. Impact inc...

CVE-2026-78404: Improper Privilege Management

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to a local privilege escalation via the db2pd utility...

PT-2026-110883

Name of the Vulnerable Software and Affected Versions IBM Db2 versions 11.5.0 through 11.5.9 IBM Db2 versions 12.1.0 through 12.1.5 Description A local privilege escalation is possible through the use of the db2pd utility. Recommendations At the moment, there is no information about a newer versi...

Security Bulletin: IBM® Db2® is vulnerable to local privilege escalation via the db2pd utility (CVE-2026-78404)

Summary IBM® Db2® is vulnerable to local privilege escalation via the db2pd utility Vulnerability Details CVEID:CVE-2026-78404 DESCRIPTION: IBM Db2 is vulnerable to a local privilege escalation via the db2pd utility. CWE:CWE-269: Improper Privilege Management CVSS Source: IBM CVSS Base score: 6.5...

CVE-2009-4332: Undefined Security Weakness

db2pd in the Problem Determination component in IBM DB2 9.1 before FP7 and 9.5 before FP5 allows attackers to cause a denial of service NULL pointer dereference and application termination via unspecified vectors...

Design/Logic Flaw

Unspecified vulnerability in DB2PD in IBM DB2 UDB before 8.2 Fixpak 16 allows local users to gain root privileges via unspecified vectors...

CVE-2008-0697

Unspecified vulnerability in DB2PD in IBM DB2 UDB before 8.2 Fixpak 16 allows local users to gain root privileges via unspecified vectors...

CVE-2008-0697: Undefined Security Weakness

Unspecified vulnerability in DB2PD in IBM DB2 UDB before 8.2 Fixpak 16 allows local users to gain root privileges via unspecified vectors...

CVE-2007-5757: Undefined Security Weakness

Untrusted search path vulnerability in db2pd in IBM DB2 Universal Database UDB 8 before FixPak 16 and 9 before Fix Pack 4 allows local users to gain root privileges via a modified DB2INSTANCE environment variable that points to a malicious library. NOTE: this might be the same issue as...

DB2 < 8.1 FixPak 16 Multiple Vulnerabilities (deprecated)

Binary data 4358.prm...

Design/Logic Flaw

Multiple untrusted search path vulnerabilities in IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 allow local users to gain privileges via certain vectors related to 1 DB2 instance or FMP startup on Linux and Solaris; 2 exec of executables while running as root on non-Windows systems, as...

CVE-2007-4275

Multiple untrusted search path vulnerabilities in IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 allow local users to gain privileges via certain vectors related to 1 DB2 instance or FMP startup on Linux and Solaris; 2 exec of executables while running as root on non-Windows systems, as...