Known vulnerabilities in postgresql-14 (Ubuntu package) - page 2
Vendor:
Canonical Ltd.
Software:
postgresql-14 (Ubuntu package)
Software CPE:
cpe:2.3:o:canonical:postgresql-14_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Website:
https://www.ubuntu.com/
Total vulnerabilities:
66
Public exploits:
2
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.2
Breakdown by Severity Chart
14.24-0ubuntu0.22.04.1
16.15-0ubuntu0.24.04.1
18.6-0ubuntu0.26.04.1
14.23-0ubuntu0.22.04.1
16.14-0ubuntu0.24.04.1
17.10-0ubuntu0.25.10.1
18.4-0ubuntu0.26.04.1
14.22-0ubuntu0.22.04.1
16.13-0ubuntu0.24.04.1
17.9-0ubuntu0.25.10.1
14.20-0ubuntu0.22.04.1
16.11-0ubuntu0.24.04.1
17.7-0ubuntu0.25.04.1
17.7-0ubuntu0.25.10.1
14.19-0ubuntu0.22.04.1
16.10-0ubuntu0.24.04.1
17.6-0ubuntu0.25.04.1
14.6-0ubuntu1
14.6-0ubuntu0.22.10.1
14.6-0ubuntu0.22.04.1
14.5-1ubuntu2
14.5-1ubuntu1
14.5-1
14.4-1
14.4-0ubuntu0.22.04.1
14.3-1
14.2-1ubuntu2
14.2-1ubuntu1
14.2-1
14.1-5build3
14.1-5build2
14.1-5build1
14.1-5
14.1-2
14.1-3
14.1-4
14~beta1-1
14~beta2-1
14~beta3-1
14~rc1-1
14.0-1
14.1-1
14.1-1build1
14.1-1ubuntu1
14.18-0ubuntu0.22.04.1
14.17-0ubuntu0.22.04.1
14.15-0ubuntu0.22.04.1
14.13-0ubuntu0.22.04.1
14.12-0ubuntu0.22.04.1
14.11-0ubuntu0.22.04.1
14.10-0ubuntu0.22.04.1
14.9-0ubuntu0.22.04.1
14.8-0ubuntu0.22.04.1
14.8-0ubuntu0.22.10.1
14.7-0ubuntu0.22.04.1
14.7-0ubuntu0.22.10.1
14.5-0ubuntu0.22.04.1
14.3-0ubuntu0.22.04.1
Vulnerabilities (66)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU142632 - Heap-based Buffer Overflow CVE-2026-14676 |
CWE-122 | Medium | 14.24-0ubuntu0.22.04.1, 16.15-0ubuntu0.24.04.1, 18.6-0ubuntu0.26.04.1 | 15.08.2026 |
SB2026081505 SB2026082081 |
||
| #VU142630 - Out-of-bounds read CVE-2026-14678 |
CWE-125 | Low | 14.24-0ubuntu0.22.04.1, 16.15-0ubuntu0.24.04.1, 18.6-0ubuntu0.26.04.1 | 15.08.2026 |
SB2026081505 SB2026081506 SB2026082060 and 7 more |
||
| #VU142629 - Stack-based buffer overflow CVE-2026-14679 |
CWE-121 | High | 14.24-0ubuntu0.22.04.1, 16.15-0ubuntu0.24.04.1, 18.6-0ubuntu0.26.04.1 | 15.08.2026 |
SB2026081505 SB2026081506 SB2026082060 and 7 more |
||
| #VU142628 - Type confusion CVE-2026-14680 |
CWE-843 | Medium | 14.24-0ubuntu0.22.04.1, 16.15-0ubuntu0.24.04.1, 18.6-0ubuntu0.26.04.1 | 15.08.2026 |
SB2026081505 SB2026081506 SB2026082060 and 7 more |
||
| #VU142627 - Improper Access Control CVE-2026-14681 |
CWE-284 | Low | 14.24-0ubuntu0.22.04.1, 16.15-0ubuntu0.24.04.1, 18.6-0ubuntu0.26.04.1 | 15.08.2026 |
SB2026081505 SB2026081506 SB2026082060 and 2 more |
||
| #VU142626 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2026-15741 |
CWE-89 | High | 14.24-0ubuntu0.22.04.1, 16.15-0ubuntu0.24.04.1, 18.6-0ubuntu0.26.04.1 | 15.08.2026 |
SB2026081505 SB2026081506 SB2026082060 and 7 more |
||
| #VU142625 - Integer overflow CVE-2026-15742 |
CWE-190 | Medium | 14.24-0ubuntu0.22.04.1, 16.15-0ubuntu0.24.04.1, 18.6-0ubuntu0.26.04.1 | 15.08.2026 |
SB2026081505 SB2026081506 SB2026082060 and 7 more |
||
| #VU142624 - Type confusion CVE-2026-16238 |
CWE-843 | Medium | 14.24-0ubuntu0.22.04.1, 16.15-0ubuntu0.24.04.1, 18.6-0ubuntu0.26.04.1 | 15.08.2026 |
SB2026081505 SB2026082081 |
||
| #VU131454 - Missing Authorization CVE-2026-6472 |
CWE-862 | Low | 14.23-0ubuntu0.22.04.1, 16.14-0ubuntu0.24.04.1, 17.10-0ubuntu0.25.10.1, 18.4-0ubuntu0.26.04.1 | 14.05.2026 |
SB20260514106 SB20260514108 SB20260514109 and 27 more |
||
| #VU131455 - Integer overflow CVE-2026-6473 |
CWE-190 | Low | 14.23-0ubuntu0.22.04.1, 14.24-0ubuntu0.22.04.1, 16.14-0ubuntu0.24.04.1, 16.15-0ubuntu0.24.04.1, 17.10-0ubuntu0.25.10.1, 18.4-0ubuntu0.26.04.1, 18.6-0ubuntu0.26.04.1 | 14.05.2026 |
SB20260514106 SB20260514108 SB20260514109 and 55 more |
||
| #VU131456 - Use of Externally-Controlled Format String CVE-2026-6474 |
CWE-134 | Low | 14.23-0ubuntu0.22.04.1, 16.14-0ubuntu0.24.04.1, 17.10-0ubuntu0.25.10.1, 18.4-0ubuntu0.26.04.1 | 14.05.2026 |
SB20260514106 SB20260514108 SB20260514109 and 26 more |
||
| #VU131457 - Improper Link Resolution Before File Access ('Link Following') CVE-2026-6475 |
CWE-59 | Medium | 14.23-0ubuntu0.22.04.1, 16.14-0ubuntu0.24.04.1, 17.10-0ubuntu0.25.10.1, 18.4-0ubuntu0.26.04.1 | 14.05.2026 |
SB20260514106 SB20260514108 SB20260514109 and 43 more |
||
| #VU131458 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2026-6476 |
CWE-89 | Low | 14.23-0ubuntu0.22.04.1, 16.14-0ubuntu0.24.04.1, 17.10-0ubuntu0.25.10.1, 18.4-0ubuntu0.26.04.1 | 14.05.2026 |
SB20260514106 SB20260514108 SB2026051852 and 7 more |
||
| #VU131459 - Stack-based buffer overflow CVE-2026-6477 |
CWE-121 | High | 14.23-0ubuntu0.22.04.1, 16.14-0ubuntu0.24.04.1, 17.10-0ubuntu0.25.10.1, 18.4-0ubuntu0.26.04.1 | 14.05.2026 |
SB20260514106 SB20260514108 SB20260514109 and 51 more |
||
| #VU131460 - Information Exposure Through Timing Discrepancy CVE-2026-6478 |
CWE-208 | Medium | 14.23-0ubuntu0.22.04.1, 16.14-0ubuntu0.24.04.1, 17.10-0ubuntu0.25.10.1, 18.4-0ubuntu0.26.04.1 | 14.05.2026 |
SB20260514106 SB20260514108 SB20260514109 and 50 more |
||
| #VU131461 - Uncontrolled Recursion CVE-2026-6479 |
CWE-674 | Medium | 14.23-0ubuntu0.22.04.1, 16.14-0ubuntu0.24.04.1, 17.10-0ubuntu0.25.10.1, 18.4-0ubuntu0.26.04.1 | 14.05.2026 |
SB20260514106 SB20260514108 SB20260514109 and 32 more |
||
| #VU131462 - Out-of-bounds read CVE-2026-6575 |
CWE-125 | Low | 14.23-0ubuntu0.22.04.1, 16.14-0ubuntu0.24.04.1, 17.10-0ubuntu0.25.10.1, 18.4-0ubuntu0.26.04.1 | 14.05.2026 |
SB20260514106 SB2026051853 SB2026051854 and 3 more |
||
| #VU131463 - Stack-based buffer overflow CVE-2026-6637 |
CWE-121 | Medium | 14.23-0ubuntu0.22.04.1, 16.14-0ubuntu0.24.04.1, 17.10-0ubuntu0.25.10.1, 18.4-0ubuntu0.26.04.1 | 14.05.2026 |
SB20260514106 SB20260514108 SB20260514109 and 29 more |
||
| #VU131464 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2026-6638 |
CWE-89 | Low | 14.23-0ubuntu0.22.04.1, 16.14-0ubuntu0.24.04.1, 17.10-0ubuntu0.25.10.1, 18.4-0ubuntu0.26.04.1 | 14.05.2026 |
SB20260514106 SB20260514108 SB2026051852 and 12 more |
||
| #VU122779 - Memory corruption CVE-2026-2006 |
CWE-119 | Medium | 14.22-0ubuntu0.22.04.1, 16.13-0ubuntu0.24.04.1, 17.9-0ubuntu0.25.10.1 | 12.02.2026 |
SB2026021258 SB2026021302 SB2026021303 and 69 more |
Showing elements 21 - 40 out of 66