Memory Leak Vulnerability in IBM Db2 for Linux, UNIX and Windows
CVE-2026-18096

3.3LOW

Key Information:

Vendor

IBM
Status
Db2
Vendor
CVE Published:
12 August 2026

What is CVE-2026-18096?

A local attacker could exploit a memory leak in IBM Db2 12.1.5 for Linux, UNIX, and Windows, including the DB2 Connect Server, to induce a denial of service. This vulnerability allows the attacker to consume system memory, potentially leading to degraded performance or service unavailability. Proper patching is crucial to mitigate this risk and ensure the integrity and availability of the affected database environment.

Affected Version(s)

Db2 12.1.5

References

https://www.ibm.com/support/pages/node/7282953
vendor-advisorypatch

CVSS V3.1

Score:
3.3
Severity:
LOW
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.