Known vulnerabilities in PostgreSQL
Software:
PostgreSQL
Software CPE:
cpe:2.3:a:postgresql_global_development_group:postgresql:*:*:*:*:*:*:*:*
Website:
https://www.postgresql.org
Total vulnerabilities:
198
Public exploits:
9
Known exploited (KEV):
2
Highest CVSSv4 Score:
9.4
Breakdown by Severity Chart
18.5
18.6
17.11
16.15
15.19
14.24
18.4
17.10
16.14
15.18
14.23
18.3
17.9
16.13
15.17
14.22
18.2
17.8
16.12
15.16
14.21
18.1
17.7
16.11
15.15
14.20
13.23
18.0
17.6
16.10
15.14
14.19
13.22
17.5
16.9
15.13
14.18
13.21
17.4
16.8
15.12
14.17
13.20
17.3
16.7
15.11
14.16
13.19
17.2
16.6
15.10
14.15
13.18
12.22
17.1
16.5
15.9
14.14
13.17
12.21
17.0
16.4
15.8
14.13
13.16
12.20
16.3
15.7
14.12
13.15
12.19
16.2
15.6
14.11
13.14
12.18
16.1
15.5
14.10
13.13
12.17
11.22
16.0
15.4
14.9
13.12
12.16
11.21
15.3
14.8
13.11
12.15
11.20
15.2
14.7
13.10
12.14
11.19
15.1
14.6
13.9
12.13
11.18
10.23
15.0
14.5
13.8
12.12
11.17
10.22
14.4
14.3
13.7
12.11
11.16
10.21
14.2
13.6
12.10
11.15
10.20
14.1
13.5
12.9
11.14
10.19
9.6.24
14.0
13.4
12.8
11.13
10.18
9.6.23
13.3
12.7
11.12
10.17
9.6.22
13.2
12.6
11.11
10.16
9.6.21
9.5.25
13.1
12.5
11.10
10.15
9.6.20
9.5.24
13.0
8.4.22
12.4
11.9
10.14
9.6.19
9.5.23
5.0.3
10.10.4
12.3
11.8
10.13
9.6.18
9.5.22
12.2
11.7
10.12
9.6.17
9.5.21
9.4.26
12.1
11.6
10.11
9.6.16
9.5.20
9.4.25
12.0
11.5
10.10
9.6.15
9.5.19
9.4.24
12
11.4
10.9
9.6.14
9.5.18
9.4.23
11.3
11.2
10.8
10.7
9.6.13
9.6.12
9.6.11
9.5.17
9.5.16
9.5.15
9.5.13
9.5.12
9.4.22
9.4.21
9.4.20
9.4.18
9.4.17
9.3.25
9.3.23
9.3.22
11.1
11.0
10.6
9.3.24
9.4.19
9.5.14
9.6.10
10.5
9.6.8
10.4
9.6.9
10.3
10.2
10.1
10.0
9.6.7
9.5.11
9.5.10
9.5.9
9.4.16
9.4.15
9.4.14
9.3.21
9.3.20
9.3.19
9.3.18
9.3.0
9.2.24
9.2.23
9.2.0
9.1.24
9.1.22
9.1.21
9.1.20
9.1.0
9.0.23
9.0.21
9.0.20
9.0.18
9.0.17
9.0.16
8.4.21
8.4.20
8.4.0
8.3.23
8.3.0
8.2.23
8.2.22
8.2.21
8.2.20
8.2.0
8.1.23
8.1.22
8.0.26
7.4.30
7.3.21
7.3.20
1.08
9.6.6
9.6.5
9.5.8
9.6.4
9.5.0
9.4.13
9.2.22
9.6.3
9.5.7
9.4.12
9.3.17
9.2.21
9.6.2
9.6.1
9.6.0
9.5.6
9.5.5
9.5.3
9.5.2
9.4.11
9.4.10
9.4.8
9.4.7
9.4.6
9.3.13
9.3.12
9.3.11
9.3.10
9.3.16
9.3.15
9.2.20
9.2.19
9.2.17
9.2.16
9.2.15
9.5.1
9.2.14
9.5
9.4.5
9.4
9.1.19
9.0.22
9.2.13
9.2.12
9.3.8
9.2.11
9.3.9
9.3.7
9.1.18
9.1.17
9.1.16
9.4.3
9.4.4
9.4.2
9.2.10
9.4.0
9.0.19
9.4.1
9.3.3
9.3.4
9.3.5
9.3.6
9.2.7
9.2.8
9.2.9
9.1.12
9.1.15
9.1.14
9.1.13
9.3.2
9.3.1
9.1.9
9.0.13
9.0.14
9.0.15
8.4.19
8.4.18
8.4.17
9.2.4
9.2.5
9.2.6
9.3
9.1.11
9.1.10
8.4.16
9.2.3
9.2.1
9.2.2
9.1.8
9.0.12
9.2
9.1.5
9.1.6
9.1.7
9.0.10
9.0.11
8.4.14
8.4.13
8.4.15
9.0.9
8.3.20
8.3.21
8.3.22
8.3.19
8.4.12
9.1.4
9.0.8
8.4.11
9.1.3
8.3.18
9.0.7
9.1.1
8.4.7
8.4.10
8.4.8
8.4.9
9.0.4
8.3.15
9.0.5
8.3.16
9.1.2
9.0.3
8.3.17
9.0.6
8.3.14
8.2.19
8.2.18
9.0.1
9.0.2
8.4.6
8.4.5
8.3.13
8.3.12
9.0
7.4.29
8.2.17
8.4.4
8.0.25
8.3.11
8.1.21
7.4.28
7.4.27
9.0.0
8.4.2
8.4.3
8.0.24
8.1.19
8.3.9
8.1.20
8.3.10
8.2.15
8.2.16
8.5
8.0.23
8.1.18
8.3.8
7.4.26
8.1.17
8.2.14
8.4.1
8.0.22
8.0.19
8.0.17
8.0.18
8.0.15
8.0.16
7.4.19
7.4.23
7.4.22
7.4.21
7.4.25
7.4.20
8.1.14
8.1.15
8.1.12
8.1.13
8.1.11
8.0.21
8.3.3
8.3.4
8.3.1
8.3.2
8.2.8
8.3.7
8.2.9
8.2.6
8.3.5
8.2.7
8.3
8.4
8.2.13
8.2.11
8.2.10
7.4.24
8.1.16
8.3.6
8.0.20
8.2.12
8.0.12
8.2.5
7.4.18
8.0.14
8.1.10
8.1.8
8.1.7
8.1.9
8.0.11
8.0.13
8.2.2
8.2.4
8.0.317
7.4.17
8.2.3
8.1.6
8.1.5
1.09
6.4
6.2
6.5
6.0
6.3
6.1.1
6.3.1
7.3.18
7.2.8
8.0.10
6.5.2
7.0.1
6.5.1
6.1
8.0.9
7.4.15
7.4.16
1.0
6.4.1
6.2.1
7.3.16
7.3.17
6.4.2
7.0
1.02
1.01
8.2.1
8.2
7.4.14
8.1.4
7.4.13
8.0.8
7.0.2
7.3.15
8.1.3
8.0.7
7.3.14
7.4.12
8.0.6
7.4.9
7.4.8
7.3.10
7.3.11
7.3.12
7.3.13
8.1
7.4.10
7.4.11
8.1.2
8.0.4
8.0.5
8.1.0
8.1.1
8.0.3
8.0.2
8.0.1
8.0
7.4
7.3.4
7.3.7
7.3.5
7.3.8
7.3.6
7.3.9
8.0.0
7.4.2
7.2.5
7.4.6
7.4.1
7.4.4
7.2.6
7.4.7
7.2.7
7.4.3
7.4.5
7.3.3
7.2.4
7.3.1
7.3.2
7.3
7.3.19
7.2.2
7.2.3
7.0.3
7.1.3
7.1.1
7.2.1
7.1.2
7.1
7.2
6.5.0
6.3.2
6.5.3.1
6.5.3
9.1
9.5.4
9.4.9
9.3.14
9.2.18
9.1.23
Vulnerabilities (198)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU142638 - Type confusion CVE-2026-14668 |
CWE-843 | Medium | 14.24, 15.19, 16.15, 17.11, 18.5 | 15.08.2026 |
SB2026081505 SB2026081506 SB2026082060 and 7 more |
||
| #VU142637 - Heap-based Buffer Overflow CVE-2026-14669 |
CWE-122 | Medium | 14.24, 15.19, 16.15, 17.11, 18.5 | 15.08.2026 |
SB2026081505 SB2026081506 SB2026082060 and 7 more |
||
| #VU142636 - Heap-based Buffer Overflow CVE-2026-14670 |
CWE-122 | Medium | 14.24, 15.19, 16.15, 17.11, 18.5 | 15.08.2026 |
SB2026081505 SB2026081506 SB2026082060 and 7 more |
||
| #VU142635 - Type confusion CVE-2026-14671 |
CWE-843 | Medium | 14.24, 15.19, 16.15, 17.11, 18.5 | 15.08.2026 |
SB2026081505 SB2026081506 SB2026082060 and 7 more |
||
| #VU142634 - Observable discrepancy CVE-2026-14672 |
CWE-203 | Medium | 16.15, 17.11, 18.5 | 15.08.2026 |
SB2026081505 SB2026081506 SB2026082060 and 3 more |
||
| #VU142633 - Untrusted Search Path CVE-2026-14673 |
CWE-426 | Low | 14.24, 15.19, 16.15, 18.5 | 15.08.2026 |
SB2026081505 SB2026081506 SB2026082062 and 5 more |
||
| #VU142632 - Heap-based Buffer Overflow CVE-2026-14676 |
CWE-122 | Medium | 18.5 | 15.08.2026 |
SB2026081505 SB2026082081 |
||
| #VU142631 - Integer overflow CVE-2026-14677 |
CWE-190 | Medium | 14.24, 15.19, 16.15, 17.11, 18.5 | 15.08.2026 |
SB2026081505 SB2026081506 SB2026082060 and 7 more |
||
| #VU142630 - Out-of-bounds read CVE-2026-14678 |
CWE-125 | Low | 14.24, 15.19, 16.15, 17.11, 18.5 | 15.08.2026 |
SB2026081505 SB2026081506 SB2026082060 and 7 more |
||
| #VU142629 - Stack-based buffer overflow CVE-2026-14679 |
CWE-121 | High | 14.24, 15.19, 16.15, 17.11, 18.5 | 15.08.2026 |
SB2026081505 SB2026081506 SB2026082060 and 7 more |
||
| #VU142628 - Type confusion CVE-2026-14680 |
CWE-843 | Medium | 14.24, 15.19, 16.15, 17.11, 18.5 | 15.08.2026 |
SB2026081505 SB2026081506 SB2026082060 and 7 more |
||
| #VU142627 - Improper Access Control CVE-2026-14681 |
CWE-284 | Low | 17.11, 18.5 | 15.08.2026 |
SB2026081505 SB2026081506 SB2026082060 and 2 more |
||
| #VU142626 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2026-15741 |
CWE-89 | High | 14.24, 15.19, 16.15, 17.11, 18.5 | 15.08.2026 |
SB2026081505 SB2026081506 SB2026082060 and 7 more |
||
| #VU142625 - Integer overflow CVE-2026-15742 |
CWE-190 | Medium | 14.24, 15.19, 16.15, 17.11, 18.5 | 15.08.2026 |
SB2026081505 SB2026081506 SB2026082060 and 7 more |
||
| #VU142624 - Type confusion CVE-2026-16238 |
CWE-843 | Medium | 18.5 | 15.08.2026 |
SB2026081505 SB2026082081 |
||
| #VU142623 - Type confusion CVE-2026-16239 |
CWE-843 | Medium | 14.24, 15.19, 16.15, 17.11, 18.5 | 15.08.2026 |
SB2026081505 SB2026081506 SB2026082060 and 7 more |
||
| #VU142622 - Integer underflow CVE-2026-16241 |
CWE-191 | Low | 14.24, 15.19, 16.15, 17.11, 18.5 | 15.08.2026 |
SB2026081505 SB2026081506 SB2026082060 and 7 more |
||
| #VU142621 - Out-of-bounds read CVE-2026-18024 |
CWE-125 | Low | 14.24, 15.19, 16.15, 17.11, 18.5 | 15.08.2026 |
SB2026081505 SB2026081506 SB2026082060 and 7 more |
||
| #VU142620 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') CVE-2026-18408 |
CWE-74 | High | 14.24, 15.19, 16.15, 17.11, 18.5 | 15.08.2026 |
SB2026081505 SB2026081506 SB2026082060 and 7 more |
||
| #VU142619 - Heap-based Buffer Overflow CVE-2026-19385 |
CWE-122 | Medium | 14.24, 15.19, 16.15, 17.11, 18.5 | 15.08.2026 |
SB2026081505 SB2026081506 SB2026082060 and 7 more |
Showing elements 1 - 20 out of 198