Multiple vulnerabilities in PostgreSQL

Описание

Multiple vulnerabilities were found in PostgreSQL. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, cause denial of service.

Below is a complete list of vulnerabilities:

1. Improper validation vulnerability in PostgreSQL can be used to obtain sensitive information.
2. Missing validation vulnerability in PostgreSQL can be exploited to execute arbitrary code.
3. Heap buffer overflow vulnerability in PostgreSQL can be exploited to cause denial of service or execute arbitrary code.
4. Missing validation vulnerability in PostgreSQL can be exploited to cause denial of service or execute arbitrary code.

Первичный источник обнаружения

• PostgreSQL oidvector discloses a few bytes of memory
  PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code
  PostgreSQL pgcrypto heap buffer overflow executes arbitrary code
  PostgreSQL missing validation of multibyte character length executes arbitrary code
  

Связанные продукты

• PostgreSQL

Список CVE

• CVE-2026-2003
  warning
• CVE-2026-2004
  critical
• CVE-2026-2005
  critical
• CVE-2026-2006
  critical

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com