CVE-2026-119377Low· 2.5▾ SunlitSQLite before 3.54.0 contains an authorization bypass vulnerability in lookupName() that invokes the authorizer only for the first joined table's USING column. Attackers able to submit SQL can query a shared USING column in a RIGHT or FU…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 13.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.1%
SQLite before 3.54.0 contains an authorization bypass vulnerability in lookupName() that invokes the authorizer only for the first joined table's USING column. Attackers able to submit SQL can query a shared USING column in a RIGHT or FULL JOIN to read columns denied via sqlite3_set_authorizer() SQLITE_READ restrictions.
SQLite < 3.54.0Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-119591Medium· 5.5SQLite before 3.54.0 Stack Exhaustion via countOfViewOptimization() in VALUES Clause
CVE-2026-119376Medium· 5.5SQLite before 3.54.0 Stack Exhaustion via COLLATE Operator Chain
CVE-2026-119372Medium· 5.5SQLite before 3.54.0 Use-After-Free in FTS3 fts3BestSnippet() via snippet()
CVE-2026-119373High· 7.8SQLite before 3.54.0 FTS5 Heap Buffer Overflow via fts5MergeRowidLists()
CVE-2026-11824High· 7.8SQLite before 3.53.2 contains a heap-based buffer overflow vulnerability in the FTS5 full-text search extension that allows attackers to cause a crash or execute arbitrary code by supplying a crafted database with malicious continuation …
CVE-2026-11822High· 7.8SQLite before 3.53.2 contains memory corruption vulnerabilities in the FTS5 full-text search extension that allow attackers to cause process crashes, memory exhaustion, or arbitrary code execution by supplying a crafted database with mal…