Known vulnerabilities in PostgreSQL
Software:
PostgreSQL
Software CPE:
cpe:2.3:a:postgresql_global_development_group:postgresql:*:*:*:*:*:*:*:*
Website:
https://www.postgresql.org
Total vulnerabilities:
198
Public exploits:
11
Known exploited (KEV):
2
Breakdown by Severity Chart
18.5
18.6
17.11
16.15
15.19
14.24
18.4
17.10
16.14
15.18
14.23
18.3
17.9
16.13
15.17
14.22
18.2
17.8
16.12
15.16
14.21
18.1
17.7
16.11
15.15
14.20
13.23
18.0
17.6
16.10
15.14
14.19
13.22
17.5
16.9
15.13
14.18
13.21
17.4
16.8
15.12
14.17
13.20
17.3
16.7
15.11
14.16
13.19
17.2
16.6
15.10
14.15
13.18
12.22
17.1
16.5
15.9
14.14
13.17
12.21
17.0
16.4
15.8
14.13
13.16
12.20
16.3
15.7
14.12
13.15
12.19
16.2
15.6
14.11
13.14
12.18
16.1
15.5
14.10
13.13
12.17
11.22
16.0
15.4
14.9
13.12
12.16
11.21
15.3
14.8
13.11
12.15
11.20
15.2
14.7
13.10
12.14
11.19
15.1
14.6
13.9
12.13
11.18
10.23
15.0
14.5
13.8
12.12
11.17
10.22
14.4
14.3
13.7
12.11
11.16
10.21
14.2
13.6
12.10
11.15
10.20
14.1
13.5
12.9
11.14
10.19
9.6.24
14.0
13.4
12.8
11.13
10.18
9.6.23
13.3
12.7
11.12
10.17
9.6.22
13.2
12.6
11.11
10.16
9.6.21
9.5.25
13.1
12.5
11.10
10.15
9.6.20
9.5.24
13.0
8.4.22
12.4
11.9
10.14
9.6.19
9.5.23
5.0.3
10.10.4
12.3
11.8
10.13
9.6.18
9.5.22
12.2
11.7
10.12
9.6.17
9.5.21
9.4.26
12.1
11.6
10.11
9.6.16
9.5.20
9.4.25
12.0
11.5
10.10
9.6.15
9.5.19
9.4.24
12
11.4
10.9
9.6.14
9.5.18
9.4.23
11.3
11.2
10.8
10.7
9.6.13
9.6.12
9.6.11
9.5.17
9.5.16
9.5.15
9.5.13
9.5.12
9.4.22
9.4.21
9.4.20
9.4.18
9.4.17
9.3.25
9.3.23
9.3.22
11.1
11.0
10.6
9.3.24
9.4.19
9.5.14
9.6.10
10.5
9.6.8
10.4
9.6.9
10.3
10.2
10.1
10.0
9.6.7
9.5.11
9.5.10
9.5.9
9.4.16
9.4.15
9.4.14
9.3.21
9.3.20
9.3.19
9.3.18
9.3.0
9.2.24
9.2.23
9.2.0
9.1.24
9.1.22
9.1.21
9.1.20
9.1.0
9.0.23
9.0.21
9.0.20
9.0.18
9.0.17
9.0.16
8.4.21
8.4.20
8.4.0
8.3.23
8.3.0
8.2.23
8.2.22
8.2.21
8.2.20
8.2.0
8.1.23
8.1.22
8.0.26
7.4.30
7.3.21
7.3.20
1.08
9.6.6
9.6.5
9.5.8
9.6.4
9.5.0
9.4.13
9.2.22
9.6.3
9.5.7
9.4.12
9.3.17
9.2.21
9.6.2
9.6.1
9.6.0
9.5.6
9.5.5
9.5.3
9.5.2
9.4.11
9.4.10
9.4.8
9.4.7
9.4.6
9.3.13
9.3.12
9.3.11
9.3.10
9.3.16
9.3.15
9.2.20
9.2.19
9.2.17
9.2.16
9.2.15
9.5.1
9.2.14
9.5
9.4.5
9.4
9.1.19
9.0.22
9.2.13
9.2.12
9.3.8
9.2.11
9.3.9
9.3.7
9.1.18
9.1.17
9.1.16
9.4.3
9.4.4
9.4.2
9.2.10
9.4.0
9.0.19
9.4.1
9.3.3
9.3.4
9.3.5
9.3.6
9.2.7
9.2.8
9.2.9
9.1.12
9.1.15
9.1.14
9.1.13
9.3.2
9.3.1
9.1.9
9.0.13
9.0.14
9.0.15
8.4.19
8.4.18
8.4.17
9.2.4
9.2.5
9.2.6
9.3
9.1.11
9.1.10
8.4.16
9.2.3
9.2.1
9.2.2
9.1.8
9.0.12
9.2
9.1.5
9.1.6
9.1.7
9.0.10
9.0.11
8.4.14
8.4.13
8.4.15
9.0.9
8.3.20
8.3.21
8.3.22
8.3.19
8.4.12
9.1.4
9.0.8
8.4.11
9.1.3
8.3.18
9.0.7
9.1.1
8.4.7
8.4.10
8.4.8
8.4.9
9.0.4
8.3.15
9.0.5
8.3.16
9.1.2
9.0.3
8.3.17
9.0.6
8.3.14
8.2.19
8.2.18
9.0.1
9.0.2
8.4.6
8.4.5
8.3.13
8.3.12
9.0
7.4.29
8.2.17
8.4.4
8.0.25
8.3.11
8.1.21
7.4.28
7.4.27
9.0.0
8.4.2
8.4.3
8.0.24
8.1.19
8.3.9
8.1.20
8.3.10
8.2.15
8.2.16
8.5
8.0.23
8.1.18
8.3.8
7.4.26
8.1.17
8.2.14
8.4.1
8.0.22
8.0.19
8.0.17
8.0.18
8.0.15
8.0.16
7.4.19
7.4.23
7.4.22
7.4.21
7.4.25
7.4.20
8.1.14
8.1.15
8.1.12
8.1.13
8.1.11
8.0.21
8.3.3
8.3.4
8.3.1
8.3.2
8.2.8
8.3.7
8.2.9
8.2.6
8.3.5
8.2.7
8.3
8.4
8.2.13
8.2.11
8.2.10
7.4.24
8.1.16
8.3.6
8.0.20
8.2.12
8.0.12
8.2.5
7.4.18
8.0.14
8.1.10
8.1.8
8.1.7
8.1.9
8.0.11
8.0.13
8.2.2
8.2.4
8.0.317
7.4.17
8.2.3
8.1.6
8.1.5
1.09
6.4
6.2
6.5
6.0
6.3
6.1.1
6.3.1
7.3.18
7.2.8
8.0.10
6.5.2
7.0.1
6.5.1
6.1
8.0.9
7.4.15
7.4.16
1.0
6.4.1
6.2.1
7.3.16
7.3.17
6.4.2
7.0
1.02
1.01
8.2.1
8.2
7.4.14
8.1.4
7.4.13
8.0.8
7.0.2
7.3.15
8.1.3
8.0.7
7.3.14
7.4.12
8.0.6
7.4.9
7.4.8
7.3.10
7.3.11
7.3.12
7.3.13
8.1
7.4.10
7.4.11
8.1.2
8.0.4
8.0.5
8.1.0
8.1.1
8.0.3
8.0.2
8.0.1
8.0
7.4
7.3.4
7.3.7
7.3.5
7.3.8
7.3.6
7.3.9
8.0.0
7.4.2
7.2.5
7.4.6
7.4.1
7.4.4
7.2.6
7.4.7
7.2.7
7.4.3
7.4.5
7.3.3
7.2.4
7.3.1
7.3.2
7.3
7.3.19
7.2.2
7.2.3
7.0.3
7.1.3
7.1.1
7.2.1
7.1.2
7.1
7.2
6.5.0
6.3.2
6.5.3.1
6.5.3
9.1
9.5.4
9.4.9
9.3.14
9.2.18
9.1.23
Vulnerabilities (198)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU142638 - Type confusion CVE-2026-14668 |
CWE-843 | Medium | 14.24, 15.19, 16.15, 17.11, 18.5 | 15.08.2026 |
SB2026081505 SB2026081506 SB2026082060 and 34 more |
||
| #VU142637 - Heap-based Buffer Overflow CVE-2026-14669 |
CWE-122 | Medium | 14.24, 15.19, 16.15, 17.11, 18.5 | 15.08.2026 |
SB2026081505 SB2026081506 SB2026082060 and 35 more |
||
| #VU142636 - Heap-based Buffer Overflow CVE-2026-14670 |
CWE-122 | Medium | 14.24, 15.19, 16.15, 17.11, 18.5 | 15.08.2026 |
SB2026081505 SB2026081506 SB2026082060 and 33 more |
||
| #VU142635 - Type confusion CVE-2026-14671 |
CWE-843 | Medium | 14.24, 15.19, 16.15, 17.11, 18.5 | 15.08.2026 |
SB2026081505 SB2026081506 SB2026082060 and 34 more |
||
| #VU142634 - Observable discrepancy CVE-2026-14672 |
CWE-203 | Medium | 16.15, 17.11, 18.5 | 15.08.2026 |
SB2026081505 SB2026081506 SB2026082060 and 10 more |
||
| #VU142633 - Untrusted Search Path CVE-2026-14673 |
CWE-426 | Low | 14.24, 15.19, 16.15, 18.5 | 15.08.2026 |
SB2026081505 SB2026081506 SB2026082062 and 15 more |
||
| #VU142632 - Heap-based Buffer Overflow CVE-2026-14676 |
CWE-122 | Medium | 18.5 | 15.08.2026 |
SB2026081505 SB2026082081 SB2026090345 and 3 more |
||
| #VU142631 - Integer overflow CVE-2026-14677 |
CWE-190 | Medium | 14.24, 15.19, 16.15, 17.11, 18.5 | 15.08.2026 |
SB2026081505 SB2026081506 SB2026082060 and 35 more |
||
| #VU142630 - Out-of-bounds read CVE-2026-14678 |
CWE-125 | Low | 14.24, 15.19, 16.15, 17.11, 18.5 | 15.08.2026 |
SB2026081505 SB2026081506 SB2026082060 and 19 more |
||
| #VU142629 - Stack-based buffer overflow CVE-2026-14679 |
CWE-121 | High | 14.24, 15.19, 16.15, 17.11, 18.5 | 15.08.2026 |
SB2026081505 SB2026081506 SB2026082060 and 33 more |
||
| #VU142628 - Type confusion CVE-2026-14680 |
CWE-843 | Medium | 14.24, 15.19, 16.15, 17.11, 18.5 | 15.08.2026 |
SB2026081505 SB2026081506 SB2026082060 and 35 more |
||
| #VU142627 - Improper Access Control CVE-2026-14681 |
CWE-284 | Low | 17.11, 18.5 | 15.08.2026 |
SB2026081505 SB2026081506 SB2026082060 and 7 more |
||
| #VU142626 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2026-15741 |
CWE-89 | High | 14.24, 15.19, 16.15, 17.11, 18.5 | 15.08.2026 |
SB2026081505 SB2026081506 SB2026082060 and 32 more |
||
| #VU142625 - Integer overflow CVE-2026-15742 |
CWE-190 | Medium | 14.24, 15.19, 16.15, 17.11, 18.5 | 15.08.2026 |
SB2026081505 SB2026081506 SB2026082060 and 35 more |
||
| #VU142624 - Type confusion CVE-2026-16238 |
CWE-843 | Medium | 18.5 | 15.08.2026 |
SB2026081505 SB2026082081 SB2026090345 and 3 more |
||
| #VU142623 - Type confusion CVE-2026-16239 |
CWE-843 | Medium | 14.24, 15.19, 16.15, 17.11, 18.5 | 15.08.2026 |
SB2026081505 SB2026081506 SB2026082060 and 35 more |
||
| #VU142622 - Integer underflow CVE-2026-16241 |
CWE-191 | Low | 14.24, 15.19, 16.15, 17.11, 18.5 | 15.08.2026 |
SB2026081505 SB2026081506 SB2026082060 and 19 more |
||
| #VU142621 - Out-of-bounds read CVE-2026-18024 |
CWE-125 | Low | 14.24, 15.19, 16.15, 17.11, 18.5 | 15.08.2026 |
SB2026081505 SB2026081506 SB2026082060 and 19 more |
||
| #VU142620 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') CVE-2026-18408 |
CWE-74 | High | 14.24, 15.19, 16.15, 17.11, 18.5 | 15.08.2026 |
SB2026081505 SB2026081506 SB2026082060 and 32 more |
||
| #VU142619 - Heap-based Buffer Overflow CVE-2026-19385 |
CWE-122 | Medium | 14.24, 15.19, 16.15, 17.11, 18.5 | 15.08.2026 |
SB2026081505 SB2026081506 SB2026082060 and 35 more |
Showing elements 1 - 20 out of 198