Multiple vulnerabilities in PostgreSQL

説明

Multiple vulnerabilities were found in PostgreSQL. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, cause denial of service.

Below is a complete list of vulnerabilities:

1. Improper validation vulnerability in PostgreSQL can be used to obtain sensitive information.
2. Missing validation vulnerability in PostgreSQL can be exploited to execute arbitrary code.
3. Heap buffer overflow vulnerability in PostgreSQL can be exploited to cause denial of service or execute arbitrary code.
4. Missing validation vulnerability in PostgreSQL can be exploited to cause denial of service or execute arbitrary code.

オリジナルアドバイザリー

• PostgreSQL oidvector discloses a few bytes of memory

• PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code
• PostgreSQL pgcrypto heap buffer overflow executes arbitrary code
• PostgreSQL missing validation of multibyte character length executes arbitrary code

関連製品

• PostgreSQL

CVEリスト

• CVE-2026-2003
  warning
• CVE-2026-2004
  critical
• CVE-2026-2005
  critical
• CVE-2026-2006
  critical

も参照してください

お住まいの地域に広がる脆弱性の統計をご覧ください statistics.securelist.com