Known vulnerabilities in postgresql-14 (Ubuntu package)
Vendor:
Canonical Ltd.
Software:
postgresql-14 (Ubuntu package)
Software CPE:
cpe:2.3:o:canonical:postgresql-14_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Website:
https://www.ubuntu.com/
Total vulnerabilities:
66
Public exploits:
2
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.2
Breakdown by Severity Chart
14.24-0ubuntu0.22.04.1
16.15-0ubuntu0.24.04.1
18.6-0ubuntu0.26.04.1
14.23-0ubuntu0.22.04.1
16.14-0ubuntu0.24.04.1
17.10-0ubuntu0.25.10.1
18.4-0ubuntu0.26.04.1
14.22-0ubuntu0.22.04.1
16.13-0ubuntu0.24.04.1
17.9-0ubuntu0.25.10.1
14.20-0ubuntu0.22.04.1
16.11-0ubuntu0.24.04.1
17.7-0ubuntu0.25.04.1
17.7-0ubuntu0.25.10.1
14.19-0ubuntu0.22.04.1
16.10-0ubuntu0.24.04.1
17.6-0ubuntu0.25.04.1
14.6-0ubuntu1
14.6-0ubuntu0.22.10.1
14.6-0ubuntu0.22.04.1
14.5-1ubuntu2
14.5-1ubuntu1
14.5-1
14.4-1
14.4-0ubuntu0.22.04.1
14.3-1
14.2-1ubuntu2
14.2-1ubuntu1
14.2-1
14.1-5build3
14.1-5build2
14.1-5build1
14.1-5
14.1-2
14.1-3
14.1-4
14~beta1-1
14~beta2-1
14~beta3-1
14~rc1-1
14.0-1
14.1-1
14.1-1build1
14.1-1ubuntu1
14.18-0ubuntu0.22.04.1
14.17-0ubuntu0.22.04.1
14.15-0ubuntu0.22.04.1
14.13-0ubuntu0.22.04.1
14.12-0ubuntu0.22.04.1
14.11-0ubuntu0.22.04.1
14.10-0ubuntu0.22.04.1
14.9-0ubuntu0.22.04.1
14.8-0ubuntu0.22.04.1
14.8-0ubuntu0.22.10.1
14.7-0ubuntu0.22.04.1
14.7-0ubuntu0.22.10.1
14.5-0ubuntu0.22.04.1
14.3-0ubuntu0.22.04.1
Vulnerabilities (66)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU142646 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') CVE-2026-6464 |
CWE-74 | High | 14.24-0ubuntu0.22.04.1, 16.15-0ubuntu0.24.04.1, 18.6-0ubuntu0.26.04.1 | 15.08.2026 |
SB2026081505 SB2026081506 SB2026082060 and 7 more |
||
| #VU142645 - Incorrect Permission Assignment for Critical Resource CVE-2026-6469 |
CWE-732 | Low | 14.24-0ubuntu0.22.04.1, 16.15-0ubuntu0.24.04.1, 18.6-0ubuntu0.26.04.1 | 15.08.2026 |
SB2026081505 SB2026081506 SB2026082060 and 7 more |
||
| #VU142644 - Improper Authorization CVE-2026-6470 |
CWE-285 | Low | 14.24-0ubuntu0.22.04.1, 16.15-0ubuntu0.24.04.1, 18.6-0ubuntu0.26.04.1 | 15.08.2026 |
SB2026081505 SB2026081506 SB2026082060 and 7 more |
||
| #VU142643 - Improper Authorization CVE-2026-6471 |
CWE-285 | Low | 14.24-0ubuntu0.22.04.1, 16.15-0ubuntu0.24.04.1, 18.6-0ubuntu0.26.04.1 | 15.08.2026 |
SB2026081505 SB2026081506 SB2026082060 and 7 more |
||
| #VU142642 - Integer overflow CVE-2026-14662 |
CWE-190 | Medium | 14.24-0ubuntu0.22.04.1, 16.15-0ubuntu0.24.04.1, 18.6-0ubuntu0.26.04.1 | 15.08.2026 |
SB2026081505 SB2026081506 SB2026082060 and 7 more |
||
| #VU142641 - Missing Encryption of Sensitive Data CVE-2026-14663 |
CWE-311 | Medium | 14.24-0ubuntu0.22.04.1, 16.15-0ubuntu0.24.04.1, 18.6-0ubuntu0.26.04.1 | 15.08.2026 |
SB2026081505 SB2026081506 SB2026082060 and 7 more |
||
| #VU142640 - Heap-based Buffer Overflow CVE-2026-14664 |
CWE-122 | Medium | 14.24-0ubuntu0.22.04.1, 16.15-0ubuntu0.24.04.1, 18.6-0ubuntu0.26.04.1 | 15.08.2026 |
SB2026081505 SB2026081506 SB2026082060 and 7 more |
||
| #VU142639 - Missing Authorization CVE-2026-14666 |
CWE-862 | Low | 14.24-0ubuntu0.22.04.1, 16.15-0ubuntu0.24.04.1, 18.6-0ubuntu0.26.04.1 | 15.08.2026 |
SB2026081505 SB2026081506 SB2026082060 and 7 more |
||
| #VU142638 - Type confusion CVE-2026-14668 |
CWE-843 | Medium | 14.24-0ubuntu0.22.04.1, 16.15-0ubuntu0.24.04.1, 18.6-0ubuntu0.26.04.1 | 15.08.2026 |
SB2026081505 SB2026081506 SB2026082060 and 7 more |
||
| #VU142637 - Heap-based Buffer Overflow CVE-2026-14669 |
CWE-122 | Medium | 14.24-0ubuntu0.22.04.1, 16.15-0ubuntu0.24.04.1, 18.6-0ubuntu0.26.04.1 | 15.08.2026 |
SB2026081505 SB2026081506 SB2026082060 and 7 more |
||
| #VU142636 - Heap-based Buffer Overflow CVE-2026-14670 |
CWE-122 | Medium | 14.24-0ubuntu0.22.04.1, 16.15-0ubuntu0.24.04.1, 18.6-0ubuntu0.26.04.1 | 15.08.2026 |
SB2026081505 SB2026081506 SB2026082060 and 7 more |
||
| #VU142635 - Type confusion CVE-2026-14671 |
CWE-843 | Medium | 14.24-0ubuntu0.22.04.1, 16.15-0ubuntu0.24.04.1, 18.6-0ubuntu0.26.04.1 | 15.08.2026 |
SB2026081505 SB2026081506 SB2026082060 and 7 more |
||
| #VU142634 - Observable discrepancy CVE-2026-14672 |
CWE-203 | Medium | 14.24-0ubuntu0.22.04.1, 16.15-0ubuntu0.24.04.1, 18.6-0ubuntu0.26.04.1 | 15.08.2026 |
SB2026081505 SB2026081506 SB2026082060 and 3 more |
||
| #VU142633 - Untrusted Search Path CVE-2026-14673 |
CWE-426 | Low | 14.24-0ubuntu0.22.04.1, 16.15-0ubuntu0.24.04.1, 18.6-0ubuntu0.26.04.1 | 15.08.2026 |
SB2026081505 SB2026081506 SB2026082062 and 5 more |
||
| #VU142631 - Integer overflow CVE-2026-14677 |
CWE-190 | Medium | 14.24-0ubuntu0.22.04.1, 16.15-0ubuntu0.24.04.1, 18.6-0ubuntu0.26.04.1 | 15.08.2026 |
SB2026081505 SB2026081506 SB2026082060 and 7 more |
||
| #VU142623 - Type confusion CVE-2026-16239 |
CWE-843 | Medium | 14.24-0ubuntu0.22.04.1, 16.15-0ubuntu0.24.04.1, 18.6-0ubuntu0.26.04.1 | 15.08.2026 |
SB2026081505 SB2026081506 SB2026082060 and 7 more |
||
| #VU142622 - Integer underflow CVE-2026-16241 |
CWE-191 | Low | 14.24-0ubuntu0.22.04.1, 16.15-0ubuntu0.24.04.1, 18.6-0ubuntu0.26.04.1 | 15.08.2026 |
SB2026081505 SB2026081506 SB2026082060 and 7 more |
||
| #VU142621 - Out-of-bounds read CVE-2026-18024 |
CWE-125 | Low | 14.24-0ubuntu0.22.04.1, 16.15-0ubuntu0.24.04.1, 18.6-0ubuntu0.26.04.1 | 15.08.2026 |
SB2026081505 SB2026081506 SB2026082060 and 7 more |
||
| #VU142620 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') CVE-2026-18408 |
CWE-74 | High | 14.24-0ubuntu0.22.04.1, 16.15-0ubuntu0.24.04.1, 18.6-0ubuntu0.26.04.1 | 15.08.2026 |
SB2026081505 SB2026081506 SB2026082060 and 7 more |
||
| #VU142619 - Heap-based Buffer Overflow CVE-2026-19385 |
CWE-122 | Medium | 14.24-0ubuntu0.22.04.1, 16.15-0ubuntu0.24.04.1, 18.6-0ubuntu0.26.04.1 | 15.08.2026 |
SB2026081505 SB2026081506 SB2026082060 and 7 more |
Showing elements 1 - 20 out of 66