Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: PostgreSQL 14.21, 15.16 and 3 more versions Clear all filters
TI-2026-01662 CVE-2026-2005 · GHSA-hgmp-6hmc-prfc

PostgreSQL pgcrypto heap buffer overflow executes arbitrary code

Priority MEDIUM 43

Heap buffer overflow in PostgreSQL pgcrypto allows a ciphertext provider to execute arbitrary code as the operating system user running the database.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01351 Published 2026-02-12 Partial fix · 18.2, 17.8 +3 CWE-122
TI-2026-01661 CVE-2026-2004 · GHSA-qw3h-8vxv-jf6c

PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code

Priority MEDIUM 43

Missing validation of type of input in PostgreSQL intarray extension selectivity estimator function allows an object creator to execute arbitrary code as the operating system user running the database.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01322 Published 2026-02-12 Partial fix · 18.2, 17.8 +3 CWE-1287
TI-2026-01660 CVE-2026-2003 · GHSA-f3vj-j2m6-8hfj

PostgreSQL oidvector discloses a few bytes of memory

Priority LOW 20

Improper validation of type "oidvector" in PostgreSQL allows a database user to disclose a few bytes of server memory.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00314 Published 2026-02-12 Partial fix · 18.2, 17.8 +3 CWE-1287