Microsoft updates Windows DLL that triggered security alerts
ID: 296e4428-3580-5f26-a011-a8fa8e20369b
STIX ID: report--296e4428-3580-5f26-a011-a8fa8e20369b
Feed Name: Bleeping Computer
Microsoft announced it has fixed a widespread false positive issue where third-party security tools incorrectly flagged the core Windows component WinSqlite3.dll as vulnerable to CVE-2025-6965 across Windows 10/11 and Windows Server 2012–2025. The resolution is included in updates released on January 13, 2026, and users are advised to install the latest updates. Microsoft also highlighted previous false positives in Defender for Endpoint affecting SQL Server and certain Dell BIOS firmware, and clarified that WinSqlite3.dll is distinct from non-Windows sqlite3.dll.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.