DU
Product
duckdb
On CISA KEVExploited in the wild
3
CVEs
1
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 1High 1Medium 1Low 0
Watch
Add duckdb to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-111497 In wildKEVNew | 9.8 | Oct 22 | Out-of-Bounds Write in Google Brotli Decoder Affected: through 2.0.0 |
| CVE-2024-41672 | 7.5 | Jul 24 | DuckDB is a SQL database management system Affected: before 1.1.0 |
| CVE-2025-64429 | 6.5 | Nov 12 | DuckDB Encryption Crypto implementation is vulnerable Affected: >= 1.4.0, < 1.4.2 |
Showing 3