Multiple vulnerabilities in PostgreSQL

Beschreibung

Multiple vulnerabilities were found in PostgreSQL. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, cause denial of service.

Below is a complete list of vulnerabilities:

1. Improper validation vulnerability in PostgreSQL can be used to obtain sensitive information.
2. Missing validation vulnerability in PostgreSQL can be exploited to execute arbitrary code.
3. Heap buffer overflow vulnerability in PostgreSQL can be exploited to cause denial of service or execute arbitrary code.
4. Missing validation vulnerability in PostgreSQL can be exploited to cause denial of service or execute arbitrary code.

Ursprüngliche Informationshinweise

• PostgreSQL oidvector discloses a few bytes of memory

• PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code
• PostgreSQL pgcrypto heap buffer overflow executes arbitrary code
• PostgreSQL missing validation of multibyte character length executes arbitrary code

Betroffene Produkte

• PostgreSQL

CVE Liste

• CVE-2026-2003
  warning
• CVE-2026-2004
  critical
• CVE-2026-2005
  critical
• CVE-2026-2006
  critical

Mehr erfahren

Informieren Sie sich über die Statistiken der in Ihrer Region verbreiteten Sicherheitslücken statistics.securelist.com