CVE-2026-119377

SQLite before 3.54.0 contains an authorization bypass vulnerability in lookupName that invokes the authorizer only for the first joined table's USING column. Attackers able to submit SQL can query a shared USING column in a RIGHT or FULL JOIN to read columns denied via sqlite3setauthorizer...

Linux Distros Unpatched Vulnerability : CVE-2026-119377

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SQLite before 3.54.0 contains an authorization bypass vulnerability in lookupName that invokes the authorizer only for the first joined table's USING column...

AZL-111781 CVE-2026-119377 affecting package sqlite 3.44.0-4

SQLite before 3.54.0 contains an authorization bypass vulnerability in lookupName that invokes the authorizer only for the first joined table's USING column. Attackers able to submit SQL can query a shared USING column in a RIGHT or FULL JOIN to read columns denied via sqlite3setauthorizer...

DEBIAN-CVE-2026-119377

SQLite before 3.54.0 contains an authorization bypass vulnerability in lookupName that invokes the authorizer only for the first joined table's USING column. Attackers able to submit SQL can query a shared USING column in a RIGHT or FULL JOIN to read columns denied via sqlite3setauthorizer...

CVE-2026-119377

SQLite before 3.54.0 contains an authorization bypass vulnerability in lookupName that invokes the authorizer only for the first joined table's USING column. Attackers able to submit SQL can query a shared USING column in a RIGHT or FULL JOIN to read columns denied via sqlite3setauthorizer...

UBUNTU-CVE-2026-119377

SQLite before 3.54.0 contains an authorization bypass vulnerability in lookupName that invokes the authorizer only for the first joined table's USING column. Attackers able to submit SQL can query a shared USING column in a RIGHT or FULL JOIN to read columns denied via sqlite3setauthorizer...

CVE-2026-119377

SQLite before 3.54.0 contains an authorization bypass vulnerability in lookupName that invokes the authorizer only for the first joined table's USING column. Attackers able to submit SQL can query a shared USING column in a RIGHT or FULL JOIN to read columns denied via sqlite3setauthorizer...

CVE-2026-119377 SQLite before 3.54.0 Authorizer Bypass via RIGHT or FULL JOIN USING

SQLite before 3.54.0 contains an authorization bypass vulnerability in lookupName that invokes the authorizer only for the first joined table's USING column. Attackers able to submit SQL can query a shared USING column in a RIGHT or FULL JOIN to read columns denied via sqlite3setauthorizer...

EUVD-2026-113788

SQLite before 3.54.0 contains an authorization bypass vulnerability in lookupName that invokes the authorizer only for the first joined table's USING column. Attackers able to submit SQL can query a shared USING column in a RIGHT or FULL JOIN to read columns denied via sqlite3setauthorizer...

CVE-2026-119377

SQLite versions prior to 3.54.0 are vulnerable to an authorization bypass in the lookupName() function. The root cause is that the authorizer is only invoked for the USING column of the first joined table. This allows an attacker to execute SQL queries that bypass sqlite3_set_authorizer() SQLITE_...

CVE-2026-119377 SQLite before 3.54.0 Authorizer Bypass via RIGHT or FULL JOIN USING

SQLite before 3.54.0 contains an authorization bypass vulnerability in lookupName that invokes the authorizer only for the first joined table's USING column. Attackers able to submit SQL can query a shared USING column in a RIGHT or FULL JOIN to read columns denied via sqlite3setauthorizer...

CVE-2026-119377

SQLite before 3.54.0 contains an authorization bypass vulnerability in lookupName that invokes the authorizer only for the first joined table's USING column. Attackers able to submit SQL can query a shared USING column in a RIGHT or FULL JOIN to read columns denied via sqlite3setauthorizer...

PT-2026-133461

SQLite before 3.54.0 contains an authorization bypass vulnerability in lookupName that invokes the authorizer only for the first joined table's USING column. Attackers able to submit SQL can query a shared USING column in a RIGHT or FULL JOIN to read columns denied via sqlite3 set authorizer SQLI...

CVE-2026-119377: SQLite: SQLite before 3.54.0 contains an authorization bypass vulnerability in lookupName() that invokes the authorizer only…

SQLite before 3.54.0 contains an authorization bypass vulnerability in lookupName that invokes the authorizer only for the first joined table's USING column. Attackers able to submit SQL can query a shared USING column in a RIGHT or FULL JOIN to read columns denied via sqlite3setauthorizer...

CVE-2026-89652

A flaw was found in the Linux kernel's Ceph file system. A malicious or compromised Ceph Metadata Server MDS can send a specially crafted LOOKUPNAME reply that causes a buffer overflow when copying dentry names during an NFS export operation. This out-of-bounds write can lead to memory corruption...

SUSE CVE-2026-67288

FreeRDP before 3.29.0 contains a null pointer dereference vulnerability in smartcard cache request decoders that accept NULL NDR pointers for LookupName in SCARDIOCTLREADCACHEA and SCARDIOCTLWRITECACHEA operations. When smartcard emulation is enabled, attackers can send crafted smartcard cache...

CVE-2026-67288 FreeRDP before 3.29.0 Denial of Service via smartcard cache

FreeRDP before 3.29.0 contains a null pointer dereference vulnerability in smartcard cache request decoders that accept NULL NDR pointers for LookupName in SCARDIOCTLREADCACHEA and SCARDIOCTLWRITECACHEA operations. When smartcard emulation is enabled, attackers can send crafted smartcard cache...

EUVD-2026-51819

FreeRDP before 3.29.0 contains a null pointer dereference vulnerability in smartcard cache request decoders that accept NULL NDR pointers for LookupName in SCARDIOCTLREADCACHEA and SCARDIOCTLWRITECACHEA operations. When smartcard emulation is enabled, attackers can send crafted smartcard cache...

PT-2026-67268

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.29.0 Description A null pointer dereference occurs in smartcard cache request decoders when they accept NULL NDR pointers for LookupName during SCARD IOCTL READCACHEA and SCARD IOCTL WRITECACHEA operations. If...

lookupName in resolve.c in SQLite 3.30.1 omits bits from the colUsed bitmask in the case of a generated column, which allows attackers to cause a denial of service or possibly have unspecified other impact.

...