Share via

Vulnerability in winsqlite3.dll

stiwe 60 Reputation points
2025-10-21T07:02:38.2633333+00:00

We have a potential security vulnerability related to the winsqlite3.dll file located in C:\Windows\System32. The current version of this DLL is an older version of SQLite that is affected by CVE-2025-6965. It seems like winsqlite3.dll is typically updated via Windows Update, but i can't see a newer version in the october KB's.

Do you plan to release an updated version? If not, is there a workaround? Or is it safe to replace winsqlite3.dll with a newer version of SQLite?

Windows for home | Windows 11 | Windows update

6 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Chris Rogers 25 Reputation points
    2025-11-07T13:00:25.5266667+00:00

    This is really poor from Microsoft.

    6 people found this answer helpful.
    0 comments
  2. Stuart Macdonald 30 Reputation points
    2025-11-13T10:23:49.32+00:00

    Yep, this is showing up in our vuln scans in Tenable. To be honest, it's 50% Tenable's fault for suggesting these components are outdated - they're not, there are no updates from Microsoft. These are Windows components, signed by MS and only MS can update them. Tenable should be flagging them as Unpatched, i.e. no fixes available, but Tenable's actual analysis and understanding of the nuances of any given detection is - in my experience - pretty terrible.

    On the other hand, Microsoft should be watching for CVEs in 3rd party libraries that they've adopted. The fact that this has gone unpatched for more than 2 months is not a good look for Windows.

    5 people found this answer helpful.
  3. Jason Warner 41 Reputation points
    2025-11-11T19:38:52.45+00:00

    Yes windows 11, windows server 2019/2022/2025 all seem to have this i have opened a ticket with Microsoft on it. If i hear back from Microsoft I will post a update.https://nvd.nist.gov/vuln/detail/CVE-2025-6965

    3 people found this answer helpful.
  4. Rafael Vargas 20 Reputation points
    2026-01-02T15:53:20.8066667+00:00

    Is this patch still pending? Our computers are fully patched, but this file is still missing updates.

    2 people found this answer helpful.
  5. Francisco Montilla 30,260 Reputation points Independent Advisor
    2025-10-21T08:41:04.7433333+00:00

    Hello,

    As of today, I do not see any Microsoft security note or Windows cumulative update explicitly calling out an updated winsqlite3.dll in October's Patch Tuesday notes, and there is no MSRC advisory that ties Windows' winsqlite3.dll to CVE-2025-6965.

    The October 14, 2025 Windows 11 cumulative KB does not mention winsqlite3.dll or SQLite in its changelog.

    The Windows Containers team also has an open GitHub issue where scanners flag winsqlite3.dll in current images, which indicates the topic is known but not yet resolved publicly there.

    The safest path right now is not to replace C:\Windows\System32\winsqlite3.dll. If you ever need to repair a protected system DLL, Microsoft's guidance is to use SFC and regular Windows Update.

    If you own apps that consume SQLite, the workaround is to stop relying on the OS-provided winsqlite3 and ship your own up-to-date SQLite with the application instead. For .NET, switch Microsoft.Data.Sqlite to the sqlite3 provider and bundle a current SQLite (3.50.2 or later).

    If you need, I can outline the exact package changes for Microsoft.Data.Sqlite or the loader order details for a Win32 deployment.

    0 comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.