# Sqlite vulnerabilities Source: https://junglewise.ai/threats/technologies/sqlite-sqlite Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 10 November 2026, 22:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/sqlite-sqlite.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 8 vulnerabilities in Sqlite: 0 in the last 7 days and 8 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-119591, was published on 30 October 2026. 8 vulnerabilities in the last four weeks, up from none in the four before. ## Counts - Last 7 days: 0 - Last 30 days: 8 - Last 90 days: 8 - All time: 8 (0 critical, 0 exploited in the wild) ## About Sqlite Lightweight, self-contained relational database engine widely used in embedded systems and applications. ## Latest Sqlite vulnerabilities - [CVE-2026-119591: SQLite stack exhaustion in countOfViewOptimization](https://junglewise.ai/threats/cve-2026-119591-sqlite-before-3-54-0-contains-a-stack-exhaustion-vulnerability) (medium, CVSS 5.5, published 30 Oct 2026) - [CVE-2026-119379: SQLite heap buffer overflow in session extension](https://junglewise.ai/threats/cve-2026-119379-sqlite-before-3-54-0-built-with-the-session-extension-contains-a) (high, CVSS 7.8, published 30 Oct 2026) - [CVE-2026-119378: SQLite use-after-free in R-Tree extension](https://junglewise.ai/threats/cve-2026-119378-sqlite-before-3-54-0-contains-a-use-after-free-vulnerability-in) (medium, CVSS 5.5, published 30 Oct 2026) - [CVE-2026-119375: SQLite information disclosure via undersized WAL page cache](https://junglewise.ai/threats/cve-2026-119375-sqlite-before-3-54-0-contains-an-information-disclosure) (medium, CVSS 5.5, published 30 Oct 2026) - [CVE-2026-119374: SQLite heap buffer overflow in FTS5 secure delete](https://junglewise.ai/threats/cve-2026-119374-sqlite-before-3-54-0-built-with-fts5-contains-a-heap-buffer) (high, CVSS 7.8, published 30 Oct 2026) - [CVE-2026-119373: SQLite heap buffer overflow in FTS5 rowid merge](https://junglewise.ai/threats/cve-2026-119373-sqlite-before-3-54-0-built-with-fts5-contains-a-heap-buffer) (high, CVSS 7.8, published 30 Oct 2026) - [CVE-2026-119372: SQLite use-after-free in fts3BestSnippet()](https://junglewise.ai/threats/cve-2026-119372-sqlite-before-3-54-0-built-with-fts3-fts4-and-sqlite-enable-fts3) (medium, CVSS 5.5, published 30 Oct 2026) - [CVE-2026-119371: SQLite stack exhaustion in common table expression nesting](https://junglewise.ai/threats/cve-2026-119371-sqlite-before-3-54-0-contains-a-stack-exhaustion-vulnerability) (medium, CVSS 5.5, published 30 Oct 2026) ## Most severe Sqlite vulnerabilities - [CVE-2026-119379: SQLite heap buffer overflow in session extension](https://junglewise.ai/threats/cve-2026-119379-sqlite-before-3-54-0-built-with-the-session-extension-contains-a) (high, CVSS 7.8, published 30 Oct 2026) - [CVE-2026-119374: SQLite heap buffer overflow in FTS5 secure delete](https://junglewise.ai/threats/cve-2026-119374-sqlite-before-3-54-0-built-with-fts5-contains-a-heap-buffer) (high, CVSS 7.8, published 30 Oct 2026) - [CVE-2026-119373: SQLite heap buffer overflow in FTS5 rowid merge](https://junglewise.ai/threats/cve-2026-119373-sqlite-before-3-54-0-built-with-fts5-contains-a-heap-buffer) (high, CVSS 7.8, published 30 Oct 2026) - [CVE-2026-119375: SQLite information disclosure via undersized WAL page cache](https://junglewise.ai/threats/cve-2026-119375-sqlite-before-3-54-0-contains-an-information-disclosure) (medium, CVSS 5.5, published 30 Oct 2026) - [CVE-2026-119591: SQLite stack exhaustion in countOfViewOptimization](https://junglewise.ai/threats/cve-2026-119591-sqlite-before-3-54-0-contains-a-stack-exhaustion-vulnerability) (medium, CVSS 5.5, published 30 Oct 2026) - [CVE-2026-119378: SQLite use-after-free in R-Tree extension](https://junglewise.ai/threats/cve-2026-119378-sqlite-before-3-54-0-contains-a-use-after-free-vulnerability-in) (medium, CVSS 5.5, published 30 Oct 2026) - [CVE-2026-119372: SQLite use-after-free in fts3BestSnippet()](https://junglewise.ai/threats/cve-2026-119372-sqlite-before-3-54-0-built-with-fts3-fts4-and-sqlite-enable-fts3) (medium, CVSS 5.5, published 30 Oct 2026) - [CVE-2026-119371: SQLite stack exhaustion in common table expression nesting](https://junglewise.ai/threats/cve-2026-119371-sqlite-before-3-54-0-contains-a-stack-exhaustion-vulnerability) (medium, CVSS 5.5, published 30 Oct 2026) ## Vulnerabilities per week 8 vulnerabilities in the last four weeks, up from none in the four before. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 8 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Sqlite vulnerabilities", https://junglewise.ai/threats/technologies/sqlite-sqlite, 10 November 2026.