Sqlite vulnerabilities and fixes
Exploited and high-severity Sqlite vulnerabilities tracked by VulnFeed, with CVSS and EPSS scores, affected versions and fixes.
- 7.8CVE-2026-119586SQLite CLI through 3.54.1 Command Injection via .recover OutputVerify fixSqlite Sqlite
1 min read - 7.8CVE-2026-119373SQLite before 3.54.0 FTS5 Heap Buffer Overflow via fts5MergeRowidLists()Fix availableSQLite SQLite
1 min read - 7.8CVE-2026-119379SQLite before 3.54.0 built with the session extension contains a heap buffer overflow vulnerability in sqlite3changeset_apply() that allows attackers Fix availableSqlite Sqlite
1 min read - 7.8CVE-2026-119374SQLite before 3.54.0 built with FTS5 contains a heap buffer overflow in fts5DoSecureDelete() that allows attackers to write past the leaf page buffer Fix availableSqlite Sqlite
1 min read