CVE-2020-11656
In SQLite through 3.31.1, the ALTER TABLE implementation has a use-after-free, as demonstrated by an ORDER BY clause that belongs to a compo
CVSS
9.8
Critical
EPSS
8.7%
p95
KEV
—
Exploit Today
29
0-100
Published: Apr 9, 2020 · Last modified: Oct 14, 2026 · CWE-416
7.6%EPSS · 30 days8.7%
2026-10-012026-10-28
In SQLite through 3.31.1, the ALTER TABLE implementation has a use-after-free, as demonstrated by an ORDER BY clause that belongs to a compound SELECT statement.
- cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf
- security.freebsd.orghttps://security.FreeBSD.org/advisories/FreeBSD-SA-20:22.sqlite.asc
- security.gentoo.orghttps://security.gentoo.org/glsa/202007-26
- security.netapp.comhttps://security.netapp.com/advisory/ntap-20200416-0001/
- www.oracle.comhttps://www.oracle.com/security-alerts/cpuApr2021.html
- www.oracle.comhttps://www.oracle.com/security-alerts/cpujan2021.html
- www.oracle.comhttps://www.oracle.com/security-alerts/cpujul2020.html
- www.oracle.comhttps://www.oracle.com/security-alerts/cpuoct2020.html
- www.sqlite.orghttps://www.sqlite.org/src/info/d09f8c3621d5f7f8
- www.tenable.comhttps://www.tenable.com/security/tns-2021-14
- www3.sqlite.orghttps://www3.sqlite.org/cgi/src/info/b64674919f673602
- cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf
- security.freebsd.orghttps://security.FreeBSD.org/advisories/FreeBSD-SA-20:22.sqlite.asc
- security.gentoo.orghttps://security.gentoo.org/glsa/202007-26
- security.netapp.comhttps://security.netapp.com/advisory/ntap-20200416-0001/
- www.oracle.comhttps://www.oracle.com/security-alerts/cpuApr2021.html
- www.oracle.comhttps://www.oracle.com/security-alerts/cpujan2021.html
- www.oracle.comhttps://www.oracle.com/security-alerts/cpujul2020.html
- www.oracle.comhttps://www.oracle.com/security-alerts/cpuoct2020.html
- www.sqlite.orghttps://www.sqlite.org/src/info/d09f8c3621d5f7f8
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-65586——
———Software installed and run as a non-privileged user may conduct improper GPU system calls to free memory in still in use, replace with another allocation and cause arbitrary memory reads or writes to physical memory pages.
A memory buffer managed by a CPU thread of control (driver) and accessed by a GPU thread of control (firmware) can be freed while in use. Software installed and run as a non-privileged user may replace that buffer with another and replace a shared resource (memory page address list) managed by the CPU thread of control (driver) leading to the GPU accessing memory not managed by the CPU thread of control (driver).5hCVE-2026-15466——
———Software installed and run as a non-privileged user may conduct improper GPU system calls to cause race condition in hardware performance counters buffer’s destruction path leading to read and/or write UAF.
The race condition in the destruction path could lead to reference counter being decremented in non-atomical way allowing other code paths using a freed object to read and/or write kernel heap memory.5hCVE-2026-76031——
———Use after free in Input in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)6hCVE-2026-76028——
———Use after free in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)6hCVE-2026-76025——
———Use after free in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)6hCVE-2026-119271——
———Use after free in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)6h