Known vulnerabilities in postgresql-14 (Ubuntu package) - page 3

Vendor: Canonical Ltd.
Software: postgresql-14 (Ubuntu package)
Software CPE: cpe:2.3:o:canonical:postgresql-14_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Website: https://www.ubuntu.com/
Total vulnerabilities: 66
Public exploits: 2
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting postgresql-14 (Ubuntu package) postgresql-14 (Ubuntu package) is affected by 66 known vulnerabilities: 1 critical, 7 high, 32 medium, 26 low Critical High Medium Low

Vulnerabilities (66)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU122778 - Heap-based Buffer Overflow
CVE-2026-2005		 CWE-122 Medium
No
No
 14.22-0ubuntu0.22.04.1, 16.13-0ubuntu0.24.04.1, 17.9-0ubuntu0.25.10.1 12.02.2026 SB2026021258
SB2026021302
SB2026021303
and 60 more
#VU122777 - Type confusion
CVE-2026-2004		 CWE-843 Medium
No
No
 14.22-0ubuntu0.22.04.1, 16.13-0ubuntu0.24.04.1, 17.9-0ubuntu0.25.10.1 12.02.2026 SB2026021258
SB2026021302
SB2026021303
and 60 more
#VU122776 - Out-of-bounds read
CVE-2026-2003		 CWE-125 Medium
No
No
 14.22-0ubuntu0.22.04.1, 16.13-0ubuntu0.24.04.1, 17.9-0ubuntu0.25.10.1 12.02.2026 SB2026021258
SB2026021302
SB2026021303
and 39 more
#VU118520 - Integer overflow
CVE-2025-12818		 CWE-190 Medium
No
No
 14.20-0ubuntu0.22.04.1, 16.11-0ubuntu0.24.04.1, 17.7-0ubuntu0.25.04.1, 17.7-0ubuntu0.25.10.1 13.11.2025 SB2025111368
SB2025112204
SB2025112205
and 64 more
#VU118519 - Missing Authorization
CVE-2025-12817		 CWE-862 Low
No
No
 14.20-0ubuntu0.22.04.1, 16.11-0ubuntu0.24.04.1, 17.7-0ubuntu0.25.04.1, 17.7-0ubuntu0.25.10.1 13.11.2025 SB2025111368
SB2025112204
SB2025112205
and 49 more
#VU114096 - Improper input validation
CVE-2025-8715		 CWE-20 Medium
No
No
 14.19-0ubuntu0.22.04.1, 16.10-0ubuntu0.24.04.1, 17.6-0ubuntu0.25.04.1 14.08.2025 SB2025081496
SB2025081898
SB2025082551
and 52 more
#VU114095 - Improper Control of Generation of Code ('Code Injection')
CVE-2025-8714		 CWE-94 Low
Available
No
 14.19-0ubuntu0.22.04.1, 14.24-0ubuntu0.22.04.1, 16.10-0ubuntu0.24.04.1, 16.15-0ubuntu0.24.04.1, 17.6-0ubuntu0.25.04.1, 18.6-0ubuntu0.26.04.1 14.08.2025 SB2025081496
SB2025081898
SB2025082551
and 60 more
#VU114094 - Permissions, Privileges, and Access Controls
CVE-2025-8713		 CWE-264 Low
No
No
 14.19-0ubuntu0.22.04.1, 16.10-0ubuntu0.24.04.1, 17.6-0ubuntu0.25.04.1 14.08.2025 SB2025081496
SB2025081898
SB2025082551
and 32 more
#VU103970 - Improper input validation
CVE-2025-1094		 CWE-20 Critical
Available
Exploited
 14.17-0ubuntu0.22.04.1 14.02.2025 SB2025021408
SB2025022038
SB2025022039
and 78 more
#VU100514 - Improper Authorization
CVE-2024-10979		 CWE-285 High
No
No
 14.15-0ubuntu0.22.04.1 15.11.2024 SB2024111502
SB2024111601
SB2024112245
and 65 more
#VU100513 - Incorrect Privilege Assignment
CVE-2024-10978		 CWE-266 Medium
No
No
 14.15-0ubuntu0.22.04.1 15.11.2024 SB2024111502
SB2024111601
SB2024112245
and 46 more
#VU100512 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2024-10977		 CWE-300 Low
No
No
 14.15-0ubuntu0.22.04.1 15.11.2024 SB2024111502
SB2024111601
SB2024112245
and 34 more
#VU100511 - Improper Privilege Management
CVE-2024-10976		 CWE-269 Medium
No
No
 14.15-0ubuntu0.22.04.1 15.11.2024 SB2024111502
SB2024111601
SB2024112245
and 47 more
#VU95605 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2024-7348		 CWE-367 Low
No
No
 14.13-0ubuntu0.22.04.1 08.08.2024 SB2024080866
SB2024080954
SB2024080955
and 63 more
#VU89297 - Missing Authorization
CVE-2024-4317		 CWE-862 Low
No
No
 14.12-0ubuntu0.22.04.1 09.05.2024 SB2024050940
SB2024051519
SB2024051525
and 28 more
#VU86275 - Improper Privilege Management
CVE-2024-0985		 CWE-269 Medium
No
No
 14.11-0ubuntu0.22.04.1 08.02.2024 SB2024020869
SB2024021617
SB2024021637
and 62 more
#VU82943 - Permissions, Privileges, and Access Controls
CVE-2023-5870		 CWE-264 Low
No
No
 14.10-0ubuntu0.22.04.1 09.11.2023 SB2023110930
SB2023111320
SB2023111324
and 54 more
#VU82942 - Integer overflow
CVE-2023-5869		 CWE-190 High
No
No
 14.10-0ubuntu0.22.04.1 09.11.2023 SB2023110930
SB2023111320
SB2023111324
and 70 more
#VU82941 - Exposure of sensitive information to an unauthorized actor
CVE-2023-5868		 CWE-200 Low
No
No
 14.10-0ubuntu0.22.04.1 09.11.2023 SB2023110930
SB2023111320
SB2023111324
and 53 more
#VU79455 - Permissions, Privileges, and Access Controls
CVE-2023-39418		 CWE-264 Low
No
No
 14.9-0ubuntu0.22.04.1 11.08.2023 SB2023081132
SB2023081716
SB2023081720
and 22 more


Showing elements 41 - 60 out of 66