https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-48498.htmlhttps://patchthecve.com/cve/CVE-2025-48498.htmlWed, 17 Jun 2026 09:29:43 +0000HIGH 7.5: A null pointer dereference vulnerability exists in the Distributed Transaction component of Bloomberg Comdb2 8.1 when processing a number of fields used for coordination. A specially crafted protocol buffer message can lead to a denial of service. An attacker can simply connect to a database instanchttps://patchthecve.com/cve/CVE-2025-46354.htmlhttps://patchthecve.com/cve/CVE-2025-46354.htmlWed, 17 Jun 2026 09:26:17 +0000HIGH 7.5: A denial of service vulnerability exists in the Distributed Transaction Commit/Abort Operation functionality of Bloomberg Comdb2 8.1. A specially crafted network packet can lead to a denial of service. An attacker can send a malicious packet to trigger this vulnerability.https://patchthecve.com/cve/CVE-2025-36520.htmlhttps://patchthecve.com/cve/CVE-2025-36520.htmlWed, 17 Jun 2026 09:14:45 +0000HIGH 7.5: A null pointer dereference vulnerability exists in the net_connectmsg Protocol Buffer Message functionality of Bloomberg Comdb2 8.1. A specially crafted network packets can lead to a denial of service. An attacker can send packets to trigger this vulnerability.https://patchthecve.com/cve/CVE-2025-36512.htmlhttps://patchthecve.com/cve/CVE-2025-36512.htmlWed, 17 Jun 2026 09:14:45 +0000HIGH 7.5: A denial of service vulnerability exists in the Bloomberg Comdb2 8.1 database when handling a distributed transaction heartbeat. A specially crafted protocol buffer message can lead to a denial of service. An attacker can simply connect to a database instance over TCP and send the crafted message tohttps://patchthecve.com/cve/CVE-2025-35966.htmlhttps://patchthecve.com/cve/CVE-2025-35966.htmlWed, 17 Jun 2026 09:14:19 +0000HIGH 7.5: A null pointer dereference vulnerability exists in the CDB2SQLQUERY protocol buffer message handling of Bloomberg Comdb2 8.1. A specially crafted protocol buffer message can lead to a denial of service. An attacker can simply connect to a database instance over TCP and send the crafted message to tr