Known vulnerabilities in PostgreSQL
Software:
PostgreSQL
Software CPE:
cpe:2.3:a:postgresql_global_development_group:postgresql:*:*:*:*:*:*:*:*
Website:
https://www.postgresql.org
Total vulnerabilities:
198
Public exploits:
11
Known exploited (KEV):
2
Breakdown by Severity Chart
18.5
18.6
17.11
16.15
15.19
14.24
18.4
17.10
16.14
15.18
14.23
18.3
17.9
16.13
15.17
14.22
18.2
17.8
16.12
15.16
14.21
18.1
17.7
16.11
15.15
14.20
13.23
18.0
17.6
16.10
15.14
14.19
13.22
17.5
16.9
15.13
14.18
13.21
17.4
16.8
15.12
14.17
13.20
17.3
16.7
15.11
14.16
13.19
17.2
16.6
15.10
14.15
13.18
12.22
17.1
16.5
15.9
14.14
13.17
12.21
17.0
16.4
15.8
14.13
13.16
12.20
16.3
15.7
14.12
13.15
12.19
16.2
15.6
14.11
13.14
12.18
16.1
15.5
14.10
13.13
12.17
11.22
16.0
15.4
14.9
13.12
12.16
11.21
15.3
14.8
13.11
12.15
11.20
15.2
14.7
13.10
12.14
11.19
15.1
14.6
13.9
12.13
11.18
10.23
15.0
14.5
13.8
12.12
11.17
10.22
14.4
14.3
13.7
12.11
11.16
10.21
14.2
13.6
12.10
11.15
10.20
14.1
13.5
12.9
11.14
10.19
9.6.24
14.0
13.4
12.8
11.13
10.18
9.6.23
13.3
12.7
11.12
10.17
9.6.22
13.2
12.6
11.11
10.16
9.6.21
9.5.25
13.1
12.5
11.10
10.15
9.6.20
9.5.24
13.0
8.4.22
12.4
11.9
10.14
9.6.19
9.5.23
5.0.3
10.10.4
12.3
11.8
10.13
9.6.18
9.5.22
12.2
11.7
10.12
9.6.17
9.5.21
9.4.26
12.1
11.6
10.11
9.6.16
9.5.20
9.4.25
12.0
11.5
10.10
9.6.15
9.5.19
9.4.24
12
11.4
10.9
9.6.14
9.5.18
9.4.23
11.3
11.2
10.8
10.7
9.6.13
9.6.12
9.6.11
9.5.17
9.5.16
9.5.15
9.5.13
9.5.12
9.4.22
9.4.21
9.4.20
9.4.18
9.4.17
9.3.25
9.3.23
9.3.22
11.1
11.0
10.6
9.3.24
9.4.19
9.5.14
9.6.10
10.5
9.6.8
10.4
9.6.9
10.3
10.2
10.1
10.0
9.6.7
9.5.11
9.5.10
9.5.9
9.4.16
9.4.15
9.4.14
9.3.21
9.3.20
9.3.19
9.3.18
9.3.0
9.2.24
9.2.23
9.2.0
9.1.24
9.1.22
9.1.21
9.1.20
9.1.0
9.0.23
9.0.21
9.0.20
9.0.18
9.0.17
9.0.16
8.4.21
8.4.20
8.4.0
8.3.23
8.3.0
8.2.23
8.2.22
8.2.21
8.2.20
8.2.0
8.1.23
8.1.22
8.0.26
7.4.30
7.3.21
7.3.20
1.08
9.6.6
9.6.5
9.5.8
9.6.4
9.5.0
9.4.13
9.2.22
9.6.3
9.5.7
9.4.12
9.3.17
9.2.21
9.6.2
9.6.1
9.6.0
9.5.6
9.5.5
9.5.3
9.5.2
9.4.11
9.4.10
9.4.8
9.4.7
9.4.6
9.3.13
9.3.12
9.3.11
9.3.10
9.3.16
9.3.15
9.2.20
9.2.19
9.2.17
9.2.16
9.2.15
9.5.1
9.2.14
9.5
9.4.5
9.4
9.1.19
9.0.22
9.2.13
9.2.12
9.3.8
9.2.11
9.3.9
9.3.7
9.1.18
9.1.17
9.1.16
9.4.3
9.4.4
9.4.2
9.2.10
9.4.0
9.0.19
9.4.1
9.3.3
9.3.4
9.3.5
9.3.6
9.2.7
9.2.8
9.2.9
9.1.12
9.1.15
9.1.14
9.1.13
9.3.2
9.3.1
9.1.9
9.0.13
9.0.14
9.0.15
8.4.19
8.4.18
8.4.17
9.2.4
9.2.5
9.2.6
9.3
9.1.11
9.1.10
8.4.16
9.2.3
9.2.1
9.2.2
9.1.8
9.0.12
9.2
9.1.5
9.1.6
9.1.7
9.0.10
9.0.11
8.4.14
8.4.13
8.4.15
9.0.9
8.3.20
8.3.21
8.3.22
8.3.19
8.4.12
9.1.4
9.0.8
8.4.11
9.1.3
8.3.18
9.0.7
9.1.1
8.4.7
8.4.10
8.4.8
8.4.9
9.0.4
8.3.15
9.0.5
8.3.16
9.1.2
9.0.3
8.3.17
9.0.6
8.3.14
8.2.19
8.2.18
9.0.1
9.0.2
8.4.6
8.4.5
8.3.13
8.3.12
9.0
7.4.29
8.2.17
8.4.4
8.0.25
8.3.11
8.1.21
7.4.28
7.4.27
9.0.0
8.4.2
8.4.3
8.0.24
8.1.19
8.3.9
8.1.20
8.3.10
8.2.15
8.2.16
8.5
8.0.23
8.1.18
8.3.8
7.4.26
8.1.17
8.2.14
8.4.1
8.0.22
8.0.19
8.0.17
8.0.18
8.0.15
8.0.16
7.4.19
7.4.23
7.4.22
7.4.21
7.4.25
7.4.20
8.1.14
8.1.15
8.1.12
8.1.13
8.1.11
8.0.21
8.3.3
8.3.4
8.3.1
8.3.2
8.2.8
8.3.7
8.2.9
8.2.6
8.3.5
8.2.7
8.3
8.4
8.2.13
8.2.11
8.2.10
7.4.24
8.1.16
8.3.6
8.0.20
8.2.12
8.0.12
8.2.5
7.4.18
8.0.14
8.1.10
8.1.8
8.1.7
8.1.9
8.0.11
8.0.13
8.2.2
8.2.4
8.0.317
7.4.17
8.2.3
8.1.6
8.1.5
1.09
6.4
6.2
6.5
6.0
6.3
6.1.1
6.3.1
7.3.18
7.2.8
8.0.10
6.5.2
7.0.1
6.5.1
6.1
8.0.9
7.4.15
7.4.16
1.0
6.4.1
6.2.1
7.3.16
7.3.17
6.4.2
7.0
1.02
1.01
8.2.1
8.2
7.4.14
8.1.4
7.4.13
8.0.8
7.0.2
7.3.15
8.1.3
8.0.7
7.3.14
7.4.12
8.0.6
7.4.9
7.4.8
7.3.10
7.3.11
7.3.12
7.3.13
8.1
7.4.10
7.4.11
8.1.2
8.0.4
8.0.5
8.1.0
8.1.1
8.0.3
8.0.2
8.0.1
8.0
7.4
7.3.4
7.3.7
7.3.5
7.3.8
7.3.6
7.3.9
8.0.0
7.4.2
7.2.5
7.4.6
7.4.1
7.4.4
7.2.6
7.4.7
7.2.7
7.4.3
7.4.5
7.3.3
7.2.4
7.3.1
7.3.2
7.3
7.3.19
7.2.2
7.2.3
7.0.3
7.1.3
7.1.1
7.2.1
7.1.2
7.1
7.2
6.5.0
6.3.2
6.5.3.1
6.5.3
9.1
9.5.4
9.4.9
9.3.14
9.2.18
9.1.23
Vulnerabilities (198)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU131454 - Missing Authorization CVE-2026-6472 |
CWE-862 | Low | 14.23, 15.18, 16.14, 17.10, 18.4 | 14.05.2026 |
SB20260514106 SB20260514108 SB20260514109 and 27 more |
||
| #VU131455 - Integer overflow CVE-2026-6473 |
CWE-190 | Low | 14.23, 15.18, 16.14, 17.10, 18.4 | 14.05.2026 |
SB20260514106 SB20260514108 SB20260514109 and 57 more |
||
| #VU131456 - Use of Externally-Controlled Format String CVE-2026-6474 |
CWE-134 | Low | 14.23, 15.18, 16.14, 17.10, 18.4 | 14.05.2026 |
SB20260514106 SB20260514108 SB20260514109 and 26 more |
||
| #VU131457 - Improper Link Resolution Before File Access ('Link Following') CVE-2026-6475 |
CWE-59 | Medium | 14.23, 15.18, 16.14, 17.10, 18.4 | 14.05.2026 |
SB20260514106 SB20260514108 SB20260514109 and 43 more |
||
| #VU131458 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2026-6476 |
CWE-89 | Low | 17.10, 18.4 | 14.05.2026 |
SB20260514106 SB20260514108 SB2026051852 and 8 more |
||
| #VU131459 - Stack-based buffer overflow CVE-2026-6477 |
CWE-121 | High | 14.23, 15.18, 16.14, 17.10, 18.4 | 14.05.2026 |
SB20260514106 SB20260514108 SB20260514109 and 51 more |
||
| #VU131460 - Information Exposure Through Timing Discrepancy CVE-2026-6478 |
CWE-208 | Medium | 14.23, 15.18, 16.14, 17.10, 18.4 | 14.05.2026 |
SB20260514106 SB20260514108 SB20260514109 and 50 more |
||
| #VU131461 - Uncontrolled Recursion CVE-2026-6479 |
CWE-674 | Medium | 14.23, 15.18, 16.14, 17.10, 18.4 | 14.05.2026 |
SB20260514106 SB20260514108 SB20260514109 and 33 more |
||
| #VU131462 - Out-of-bounds read CVE-2026-6575 |
CWE-125 | Low | 18.4 | 14.05.2026 |
SB20260514106 SB2026051853 SB2026051854 and 3 more |
||
| #VU131463 - Stack-based buffer overflow CVE-2026-6637 |
CWE-121 | Medium | 14.23, 15.18, 16.14, 17.10, 18.4 | 14.05.2026 |
SB20260514106 SB20260514108 SB20260514109 and 29 more |
||
| #VU131464 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2026-6638 |
CWE-89 | Low | 16.14, 17.10, 18.4 | 14.05.2026 |
SB20260514106 SB20260514108 SB2026051852 and 12 more |
||
| #VU122780 - Heap-based Buffer Overflow CVE-2026-2007 |
CWE-122 | Medium | 18.2 | 12.02.2026 |
SB2026021258 SB2026022046 SB2026022047 and 2 more |
||
| #VU122779 - Memory corruption CVE-2026-2006 |
CWE-119 | Medium | 14.21, 15.16, 16.12, 17.8, 18.2 | 12.02.2026 |
SB2026021258 SB2026021302 SB2026021303 and 71 more |
||
| #VU122778 - Heap-based Buffer Overflow CVE-2026-2005 |
CWE-122 | Medium | 14.21, 15.16, 16.12, 17.8, 18.2 | 12.02.2026 |
SB2026021258 SB2026021302 SB2026021303 and 60 more |
||
| #VU122777 - Type confusion CVE-2026-2004 |
CWE-843 | Medium | 14.21, 15.16, 16.12, 17.8, 18.2 | 12.02.2026 |
SB2026021258 SB2026021302 SB2026021303 and 60 more |
||
| #VU122776 - Out-of-bounds read CVE-2026-2003 |
CWE-125 | Medium | 14.21, 15.16, 16.12, 17.8, 18.2 | 12.02.2026 |
SB2026021258 SB2026021302 SB2026021303 and 39 more |
||
| #VU118520 - Integer overflow CVE-2025-12818 |
CWE-190 | Medium | 13.23, 14.20, 15.15, 16.11, 17.7, 18.1 | 13.11.2025 |
SB2025111368 SB2025112204 SB2025112205 and 64 more |
||
| #VU118519 - Missing Authorization CVE-2025-12817 |
CWE-862 | Low | 13.23, 14.20, 15.15, 16.11, 17.7, 18.1 | 13.11.2025 |
SB2025111368 SB2025112204 SB2025112205 and 49 more |
||
| #VU114095 - Improper Control of Generation of Code ('Code Injection') CVE-2025-8714 |
CWE-94 | Low | 13.22, 14.19, 15.14, 16.10, 17.6 | 14.08.2025 |
SB2025081496 SB2025081898 SB2025082551 and 63 more |
||
| #VU114094 - Permissions, Privileges, and Access Controls CVE-2025-8713 |
CWE-264 | Low | 13.22, 14.19, 15.14, 16.10, 17.6 | 14.08.2025 |
SB2025081496 SB2025081898 SB2025082551 and 32 more |
Showing elements 1 - 20 out of 198