Browse CVEs

HIGH 7.2 CVE-2026-6471 Missing authorization in PostgreSQL logical decoding allows a non-superuser holding REPLICATION privilege to dlopen any file visible to the operating… PostgreSQL No fix yet Fix from $4,9002026-08-13 HIGH 8.8 CVE-2026-14677 Integer wraparound in PostgreSQL 32-bit builds of pltcl and plperl allows an object creator to cause the server to undersize an allocation and write … PostgreSQL No fix yet Fix from $4,9002026-08-13 HIGH 8.8 CVE-2026-14680 Type confusion with PostgreSQL "internal" data type arguments allows any user to execute arbitrary code as the operating system user running the data… PostgreSQL No fix yet Fix from $4,9002026-08-13 HIGH 8.2 CVE-2026-14679 Stack buffer overflow in PostgreSQL argument name matching allows an object creator to achieve unknown impacts via OUT parameter count. The attack c… PostgreSQL No fix yet Fix from $4,9002026-08-13 HIGH 8.8 CVE-2026-14676 Heap buffer overflow in PostgreSQL pg_stat_statements allows the query author to execute arbitrary code as the operating system user running the data… PostgreSQL No fix yet Fix from $4,9002026-08-13 MEDIUM 5.9 CVE-2026-54291 pgjdbc is an open source postgresql JDBC Driver. In releases 42.7.4 through 42.7.11, channelBinding=require connections can be silently downgraded fr… Postgresql Jdbc Driver 42.7.12+ Fix from $1,6002026-07-06 HIGH 8.8 CVE-2026-6477 Use of inherently dangerous function PQfn(..., result_is_int=0, ...) in PostgreSQL libpq lo_export(), lo_read(), lo_lseek64(), and lo_tell64() functi… PostgreSQL 14.23 / 15.18+ Fix from $1,9502026-05-14 HIGH 8.8 CVE-2026-6475 Symlink following in PostgreSQL pg_basebackup plain format and in pg_rewind allows an origin superuser to overwrite local files, e.g. /var/lib/postgr… PostgreSQL 14.23 / 15.18+ Fix from $1,9502026-05-14 HIGH 8.8 CVE-2026-6637 Stack buffer overflow in PostgreSQL module "refint" allows an unprivileged database user to execute arbitrary code as the operating system user runni… PostgreSQL 14.23 / 15.18+ Fix from $1,9502026-05-14 HIGH 8.8 CVE-2026-6638 SQL injection in PostgreSQL logical replication ALTER SUBSCRIPTION ... REFRESH PUBLICATION allows a subscriber table creator to execute arbitrary SQL… PostgreSQL 16.14 / 17.10+ Fix from $1,9502026-05-14 HIGH 7.5 CVE-2026-6479 Uncontrolled recursion in PostgreSQL SSL and GSS negotiation allows an attacker able to connect to a PostgreSQL AF_UNIX socket to achieve sustained d… PostgreSQL 14.23 / 15.18+ Fix from $1,9502026-05-14 HIGH 7.2 CVE-2026-6476 SQL injection in PostgreSQL pg_createsubscriber allows an attacker with pg_create_subscription rights to execute arbitrary SQL as a superuser. The a… PostgreSQL 17.10 / 18.4+ Fix from $1,9502026-05-14 MEDIUM 6.5 CVE-2026-6478 Covert timing channel in comparison of MD5-hashed password in PostgreSQL authentication allows an attacker to recover user credentials sufficient to … PostgreSQL 14.23 / 15.18+ Fix from $1,6002026-05-14 HIGH 8.8 CVE-2026-6473 Integer wraparound in multiple PostgreSQL server features allows an unprivileged database user to cause the server to undersize an allocation and wri… PostgreSQL 14.23 / 15.18+ Fix from $1,9502026-05-14 MEDIUM 5.4 CVE-2026-6472 Missing authorization in PostgreSQL CREATE TYPE allows an object creator to hijack other queries that use search_path to find user-defined types, inc… PostgreSQL 14.23 / 15.18+ Fix from $1,6002026-05-14 HIGH 7.5 CVE-2026-42198 pgjdbc is an open source postgresql JDBC Driver. From version 42.2.0 to before version 42.7.11, pgjdbc is vulnerable to a client-side denial of servi… Postgresql Jdbc Driver 42.7.11+ Fix from $1,9502026-04-29 HIGH 8.8 CVE-2026-2004 Missing validation of type of input in PostgreSQL intarray extension selectivity estimator function allows an object creator to execute arbitrary cod… PostgreSQL 14.21 / 15.16+ Fix from $1,9502026-02-12 HIGH 8.8 CVE-2026-2005 Heap buffer overflow in PostgreSQL pgcrypto allows a ciphertext provider to execute arbitrary code as the operating system user running the database.… PostgreSQL 14.21 / 15.16+ Fix from $1,9502026-02-12 HIGH 8.8 CVE-2026-2006 Missing validation of multibyte character length in PostgreSQL text manipulation allows a database user to issue crafted queries that achieve a buffe… PostgreSQL 14.21 / 15.16+ Fix from $1,9502026-02-12 HIGH 8.2 CVE-2026-2007 Heap buffer overflow in PostgreSQL pg_trgm allows a database user to achieve unknown impacts via a crafted input string. The attacker has limited co… PostgreSQL 18.2+ Fix from $1,9502026-02-12 MEDIUM 5.9 CVE-2025-49146 pgjdbc is an open source postgresql JDBC Driver. From 42.7.4 and until 42.7.7, when the PostgreSQL JDBC driver is configured with channel binding set… Postgresql Jdbc Driver 42.7.7+ Fix from $1,6002025-06-11 HIGH 8.8 CVE-2024-10979 Incorrect control of environment variables in PostgreSQL PL/Perl allows an unprivileged database user to change sensitive process environment variabl… PostgreSQL 12.21 / 13.17+ Fix from $1,9502024-11-14 MEDIUM 5.4 CVE-2024-10976 Incomplete tracking in PostgreSQL of tables with row security allows a reused query to view or change different rows from those intended. CVE-2023-2… PostgreSQL 12.21 / 13.17+ Fix from $1,6002024-11-14 HIGH 7.5 CVE-2024-7348 Time-of-check Time-of-use (TOCTOU) race condition in pg_dump in PostgreSQL allows an object creator to execute arbitrary SQL functions as the user ru… PostgreSQL 12.20 / 13.16+ Fix from $1,9502024-08-08 CRITICAL 9.8 CVE-2024-1597 pgjdbc, the PostgreSQL JDBC Driver, allows attacker to inject SQL if using PreferQueryMode=SIMPLE. Note this is not the default. In the default mode … Postgresql Jdbc Driver 42.2.28 / 42.3.9+ Fix from $2,3002024-02-19 HIGH 8.0 CVE-2024-0985 Late privilege drop in REFRESH MATERIALIZED VIEW CONCURRENTLY in PostgreSQL allows an object creator to execute arbitrary SQL functions as the comman… PostgreSQL 12.18 / 13.14+ Fix from $1,9502024-02-08 HIGH 8.8 CVE-2023-5869 A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL array va… PostgreSQL 11.22 / 12.17+ Fix from $1,9502023-12-10 HIGH 8.8 CVE-2023-39417 IN THE EXTENSION SCRIPT, a SQL Injection vulnerability was found in PostgreSQL if it uses @extowner@, @extschema@, or @extschema:...@ inside a quotin… PostgreSQL 11.21 / 12.16+ Fix from $1,9502023-08-11 HIGH 7.2 CVE-2023-2454 schema_element defeats protective search_path changes; It was found that certain database calls in PostgreSQL could permit an authed attacker with el… PostgreSQL 11.20 / 12.15+ Fix from $1,9502023-06-09 MEDIUM 5.4 CVE-2023-2455 Row security policies disregard user ID changes after inlining; PostgreSQL could permit incorrect policies to be applied in certain cases where role-… PostgreSQL 11.20 / 12.15+ Fix from $1,6002023-06-09