CVE-2025-70873

HIGH

An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafted ZIP file.

CVSS v3.1 Score

7.5
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack Vector
NETWORK
Complexity
LOW
Privileges
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE
Published: 3/12/2026Modified: 10/15/2026

Related Intelligence (2)

CRITICALVulnerability

Siemens RUGGEDCOM CROSSBOW Station Access Controller

<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-295-15.json"><strong>View CSAF</strong></a></p> <h2>Summary</h2> <p><strong>RUGGEDCOM CROSSBOW Station Access Controller (SAC) contains multiple vulnerabilities in the integrated SQLite component that could allow an attacker to execute arbitrary code, cause a denial of service, or obtain sensitive information

CVE-2025-6965CVE-2025-70873
CISA Advisories
CRITICALRansomware

Patch Tuesday - September 2026

Microsoft is publishing 974 own-product vulnerabilities on September 2026 Patch Tuesday , including 723 vulnerabilities in Windows. Along with Microsoft fixes for 25 non-Microsoft CVEs, that brings the total number of vulnerabilities on the table today to 999. Whether this is the biggest Patch Tuesday ever depends on how we count, but this is by far the most CVEs that Microsoft has ever published

CVE-2026-85880CVE-2026-81963
Rapid7

References (4)

https://gist.github.com/cnwangjihe/f496393f30f5ecec5b18c8f5ab072054ExploitThird Party Advisoryhttps://sqlite.org/forum/forumpost/761eac3c82Issue Trackinghttps://sqlite.org/src/info/3d459f1fb1bd1b5eIssue TrackingPatchhttps://cert-portal.siemens.com/productcert/html/ssa-765416.html