Multiple vulnerabilities in PostgreSQL

Description

Multiple vulnerabilities were found in PostgreSQL. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, cause denial of service.

Below is a complete list of vulnerabilities:

1. Improper validation vulnerability in PostgreSQL can be used to obtain sensitive information.
2. Missing validation vulnerability in PostgreSQL can be exploited to execute arbitrary code.
3. Heap buffer overflow vulnerability in PostgreSQL can be exploited to cause denial of service or execute arbitrary code.
4. Missing validation vulnerability in PostgreSQL can be exploited to cause denial of service or execute arbitrary code.

Fiches de renseignement originales

• PostgreSQL oidvector discloses a few bytes of memory

• PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code
• PostgreSQL pgcrypto heap buffer overflow executes arbitrary code
• PostgreSQL missing validation of multibyte character length executes arbitrary code

Produits associés

• PostgreSQL

Liste CVE

• CVE-2026-2003
  warning
• CVE-2026-2004
  critical
• CVE-2026-2005
  critical
• CVE-2026-2006
  critical

En savoir plus

Découvrez les statistiques de la propagation des vulnérabilités dans votre région statistics.securelist.com