Known vulnerabilities in PostgreSQL
Software:
PostgreSQL
Software CPE:
cpe:2.3:a:postgresql_global_development_group:postgresql:*:*:*:*:*:*:*:*
Website:
https://www.postgresql.org
Total vulnerabilities:
170
Public exploits:
9
Known exploited (KEV):
2
Highest CVSSv4 Score:
9.4
Breakdown by Severity Chart
18.4
17.10
16.14
15.18
14.23
18.3
17.9
16.13
15.17
14.22
18.2
17.8
16.12
15.16
14.21
18.1
17.7
16.11
15.15
14.20
13.23
18.0
17.6
16.10
15.14
14.19
13.22
17.5
16.9
15.13
14.18
13.21
17.4
16.8
15.12
14.17
13.20
17.3
16.7
15.11
14.16
13.19
17.2
16.6
15.10
14.15
13.18
12.22
17.1
16.5
15.9
14.14
13.17
12.21
17.0
16.4
15.8
14.13
13.16
12.20
16.3
15.7
14.12
13.15
12.19
16.2
15.6
14.11
13.14
12.18
16.1
15.5
14.10
13.13
12.17
11.22
16.0
15.4
14.9
13.12
12.16
11.21
15.3
14.8
13.11
12.15
11.20
15.2
14.7
13.10
12.14
11.19
15.1
14.6
13.9
12.13
11.18
10.23
15.0
14.5
13.8
12.12
11.17
10.22
14.4
14.3
13.7
12.11
11.16
10.21
14.2
13.6
12.10
11.15
10.20
14.1
13.5
12.9
11.14
10.19
9.6.24
14.0
13.4
12.8
11.13
10.18
9.6.23
13.3
12.7
11.12
10.17
9.6.22
13.2
12.6
11.11
10.16
9.6.21
9.5.25
13.1
12.5
11.10
10.15
9.6.20
9.5.24
13.0
8.4.22
12.4
11.9
10.14
9.6.19
9.5.23
5.0.3
10.10.4
12.3
11.8
10.13
9.6.18
9.5.22
12.2
11.7
10.12
9.6.17
9.5.21
9.4.26
12.1
11.6
10.11
9.6.16
9.5.20
9.4.25
12.0
11.5
10.10
9.6.15
9.5.19
9.4.24
12
11.4
10.9
9.6.14
9.5.18
9.4.23
11.3
11.2
10.8
10.7
9.6.13
9.6.12
9.6.11
9.5.17
9.5.16
9.5.15
9.5.13
9.5.12
9.4.22
9.4.21
9.4.20
9.4.18
9.4.17
9.3.25
9.3.23
9.3.22
11.1
11.0
10.6
9.3.24
9.4.19
9.5.14
9.6.10
10.5
9.6.8
10.4
9.6.9
10.3
10.2
10.1
10.0
9.6.7
9.5.11
9.5.10
9.5.9
9.4.16
9.4.15
9.4.14
9.3.21
9.3.20
9.3.19
9.3.18
9.3.0
9.2.24
9.2.23
9.2.0
9.1.24
9.1.22
9.1.21
9.1.20
9.1.0
9.0.23
9.0.21
9.0.20
9.0.18
9.0.17
9.0.16
8.4.21
8.4.20
8.4.0
8.3.23
8.3.0
8.2.23
8.2.22
8.2.21
8.2.20
8.2.0
8.1.23
8.1.22
8.0.26
7.4.30
7.3.21
7.3.20
1.08
9.6.6
9.6.5
9.5.8
9.6.4
9.5.0
9.4.13
9.2.22
9.6.3
9.5.7
9.4.12
9.3.17
9.2.21
9.6.2
9.6.1
9.6.0
9.5.6
9.5.5
9.5.3
9.5.2
9.4.11
9.4.10
9.4.8
9.4.7
9.4.6
9.3.13
9.3.12
9.3.11
9.3.10
9.3.16
9.3.15
9.2.20
9.2.19
9.2.17
9.2.16
9.2.15
9.5.1
9.2.14
9.5
9.4.5
9.4
9.1.19
9.0.22
9.2.13
9.2.12
9.3.8
9.2.11
9.3.9
9.3.7
9.1.18
9.1.17
9.1.16
9.4.3
9.4.4
9.4.2
9.2.10
9.4.0
9.0.19
9.4.1
9.3.3
9.3.4
9.3.5
9.3.6
9.2.7
9.2.8
9.2.9
9.1.12
9.1.15
9.1.14
9.1.13
9.3.2
9.3.1
9.1.9
9.0.13
9.0.14
9.0.15
8.4.19
8.4.18
8.4.17
9.2.4
9.2.5
9.2.6
9.3
9.1.11
9.1.10
8.4.16
9.2.3
9.2.1
9.2.2
9.1.8
9.0.12
9.2
9.1.5
9.1.6
9.1.7
9.0.10
9.0.11
8.4.14
8.4.13
8.4.15
9.0.9
8.3.20
8.3.21
8.3.22
8.3.19
8.4.12
9.1.4
9.0.8
8.4.11
9.1.3
8.3.18
9.0.7
9.1.1
8.4.7
8.4.10
8.4.8
8.4.9
9.0.4
8.3.15
9.0.5
8.3.16
9.1.2
9.0.3
8.3.17
9.0.6
8.3.14
8.2.19
8.2.18
9.0.1
9.0.2
8.4.6
8.4.5
8.3.13
8.3.12
9.0
7.4.29
8.2.17
8.4.4
8.0.25
8.3.11
8.1.21
7.4.28
7.4.27
9.0.0
8.4.2
8.4.3
8.0.24
8.1.19
8.3.9
8.1.20
8.3.10
8.2.15
8.2.16
8.5
8.0.23
8.1.18
8.3.8
7.4.26
8.1.17
8.2.14
8.4.1
8.0.22
8.0.19
8.0.17
8.0.18
8.0.15
8.0.16
7.4.19
7.4.23
7.4.22
7.4.21
7.4.25
7.4.20
8.1.14
8.1.15
8.1.12
8.1.13
8.1.11
8.0.21
8.3.3
8.3.4
8.3.1
8.3.2
8.2.8
8.3.7
8.2.9
8.2.6
8.3.5
8.2.7
8.3
8.4
8.2.13
8.2.11
8.2.10
7.4.24
8.1.16
8.3.6
8.0.20
8.2.12
8.0.12
8.2.5
7.4.18
8.0.14
8.1.10
8.1.8
8.1.7
8.1.9
8.0.11
8.0.13
8.2.2
8.2.4
8.0.317
7.4.17
8.2.3
8.1.6
8.1.5
1.09
6.4
6.2
6.5
6.0
6.3
6.1.1
6.3.1
7.3.18
7.2.8
8.0.10
6.5.2
7.0.1
6.5.1
6.1
8.0.9
7.4.15
7.4.16
1.0
6.4.1
6.2.1
7.3.16
7.3.17
6.4.2
7.0
1.02
1.01
8.2.1
8.2
7.4.14
8.1.4
7.4.13
8.0.8
7.0.2
7.3.15
8.1.3
8.0.7
7.3.14
7.4.12
8.0.6
7.4.9
7.4.8
7.3.10
7.3.11
7.3.12
7.3.13
8.1
7.4.10
7.4.11
8.1.2
8.0.4
8.0.5
8.1.0
8.1.1
8.0.3
8.0.2
8.0.1
8.0
7.4
7.3.4
7.3.7
7.3.5
7.3.8
7.3.6
7.3.9
8.0.0
7.4.2
7.2.5
7.4.6
7.4.1
7.4.4
7.2.6
7.4.7
7.2.7
7.4.3
7.4.5
7.3.3
7.2.4
7.3.1
7.3.2
7.3
7.3.19
7.2.2
7.2.3
7.0.3
7.1.3
7.1.1
7.2.1
7.1.2
7.1
7.2
6.5.0
6.3.2
6.5.3.1
6.5.3
9.1
9.5.4
9.4.9
9.3.14
9.2.18
9.1.23
Vulnerabilities (170)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU131454 - Missing Authorization CVE-2026-6472 |
CWE-862 | Low | 14.23, 15.18, 16.14, 17.10, 18.4 | 14.05.2026 |
SB20260514106 SB20260514108 SB20260514109 and 25 more |
||
| #VU131455 - Integer overflow CVE-2026-6473 |
CWE-190 | Low | 14.23, 15.18, 16.14, 17.10, 18.4 | 14.05.2026 |
SB20260514106 SB20260514108 SB20260514109 and 46 more |
||
| #VU131456 - Use of Externally-Controlled Format String CVE-2026-6474 |
CWE-134 | Low | 14.23, 15.18, 16.14, 17.10, 18.4 | 14.05.2026 |
SB20260514106 SB20260514108 SB20260514109 and 24 more |
||
| #VU131457 - Improper Link Resolution Before File Access ('Link Following') CVE-2026-6475 |
CWE-59 | Medium | 14.23, 15.18, 16.14, 17.10, 18.4 | 14.05.2026 |
SB20260514106 SB20260514108 SB20260514109 and 41 more |
||
| #VU131458 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2026-6476 |
CWE-89 | Low | 17.10, 18.4 | 14.05.2026 |
SB20260514106 SB20260514108 SB2026051852 and 6 more |
||
| #VU131459 - Stack-based buffer overflow CVE-2026-6477 |
CWE-121 | High | 14.23, 15.18, 16.14, 17.10, 18.4 | 14.05.2026 |
SB20260514106 SB20260514108 SB20260514109 and 49 more |
||
| #VU131460 - Information Exposure Through Timing Discrepancy CVE-2026-6478 |
CWE-208 | Medium | 14.23, 15.18, 16.14, 17.10, 18.4 | 14.05.2026 |
SB20260514106 SB20260514108 SB20260514109 and 48 more |
||
| #VU131461 - Uncontrolled Recursion CVE-2026-6479 |
CWE-674 | Medium | 14.23, 15.18, 16.14, 17.10, 18.4 | 14.05.2026 |
SB20260514106 SB20260514108 SB20260514109 and 25 more |
||
| #VU131462 - Out-of-bounds read CVE-2026-6575 |
CWE-125 | Low | 18.4 | 14.05.2026 |
SB20260514106 SB2026051853 SB2026051854 and 2 more |
||
| #VU131463 - Stack-based buffer overflow CVE-2026-6637 |
CWE-121 | Medium | 14.23, 15.18, 16.14, 17.10, 18.4 | 14.05.2026 |
SB20260514106 SB20260514108 SB20260514109 and 27 more |
||
| #VU131464 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2026-6638 |
CWE-89 | Low | 16.14, 17.10, 18.4 | 14.05.2026 |
SB20260514106 SB20260514108 SB2026051852 and 11 more |
||
| #VU122780 - Heap-based Buffer Overflow CVE-2026-2007 |
CWE-122 | Medium | 18.2 | 12.02.2026 |
SB2026021258 SB2026022046 SB2026022047 and 1 more |
||
| #VU122779 - Memory corruption CVE-2026-2006 |
CWE-119 | Medium | 14.21, 15.16, 16.12, 17.8, 18.2 | 12.02.2026 |
SB2026021258 SB2026021302 SB2026021303 and 62 more |
||
| #VU122778 - Heap-based Buffer Overflow CVE-2026-2005 |
CWE-122 | Medium | 14.21, 15.16, 16.12, 17.8, 18.2 | 12.02.2026 |
SB2026021258 SB2026021302 SB2026021303 and 58 more |
||
| #VU122777 - Type confusion CVE-2026-2004 |
CWE-843 | Medium | 14.21, 15.16, 16.12, 17.8, 18.2 | 12.02.2026 |
SB2026021258 SB2026021302 SB2026021303 and 58 more |
||
| #VU122776 - Out-of-bounds read CVE-2026-2003 |
CWE-125 | Medium | 14.21, 15.16, 16.12, 17.8, 18.2 | 12.02.2026 |
SB2026021258 SB2026021302 SB2026021303 and 37 more |
||
| #VU118520 - Integer overflow CVE-2025-12818 |
CWE-190 | Medium | 13.23, 14.20, 15.15, 16.11, 17.7, 18.1 | 13.11.2025 |
SB2025111368 SB2025112204 SB2025112205 and 64 more |
||
| #VU118519 - Missing Authorization CVE-2025-12817 |
CWE-862 | Low | 13.23, 14.20, 15.15, 16.11, 17.7, 18.1 | 13.11.2025 |
SB2025111368 SB2025112204 SB2025112205 and 48 more |
||
| #VU114095 - Improper Control of Generation of Code ('Code Injection') CVE-2025-8714 |
CWE-94 | Low | 13.22, 14.19, 15.14, 16.10, 17.6 | 14.08.2025 |
SB2025081496 SB2025081898 SB2025082551 and 53 more |
||
| #VU114094 - Permissions, Privileges, and Access Controls CVE-2025-8713 |
CWE-264 | Low | 13.22, 14.19, 15.14, 16.10, 17.6 | 14.08.2025 |
SB2025081496 SB2025081898 SB2025082551 and 31 more |
Showing elements 1 - 20 out of 170