CVE-2026-6052CWE-400denial-of-service
CVE-2026-6052
Medium · published May 27, 2026
What it is
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to running out of memory when executing certain queries with MDC tables.
The record
Technical detail
- CVSS v3.1
- 6.5 · MEDIUM
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.00243 · 14.6th percentile
- Weakness
- CWE-400 · Uncontrolled Resource Consumption
- Published
- 2026-05-27T18:17Z
Affected products (2)
| Product | Versions | Fixed in |
|---|
| ibm/db2 | ≥ 11.5.0, ≤ 11.5.9 | — |
| ibm/db2 | ≥ 12.1.0, ≤ 12.1.4 | — |
References (1)
EPSS history
Timeline