An integer-truncation bug in SQLite — tracked as CVE-2025-6965 — has been confirmed and fixed upstream; the flaw can cause memory corruption when an aggregate query references more columns than the engine expects, and defenders must treat any embedded or statically linked SQLite instances that...
Microsoft’s January 13, 2026 cumulative updates finally put an end to the months‑long outbreak of noisy, misleading security alerts that flagged a core Windows library—WinSqlite3.dll—as vulnerable, restoring calm to SOC queues and IT help desks overwhelmed by false positives.
Background
For much...