Known Vulnerabilities for products from Postgresql
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Postgresql".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-76635 json | Not Provided | 2026-08-20 | 2026-08-20 | |
| CVE-2026-76212 json | Not Provided | 2026-08-19 | 2026-08-19 | |
| CVE-2026-74891 json | Not Provided | 2026-08-17 | 2026-08-17 | |
| CVE-2026-73651 json | Not Provided | 2026-08-13 | 2026-08-14 | |
| CVE-2026-73069 json | Not Provided | 2026-08-11 | 2026-08-11 | |
| CVE-2026-72881 json | Not Provided | 2026-08-10 | 2026-08-10 | |
| CVE-2026-72869 json | Not Provided | 2026-08-10 | 2026-08-11 | |
| CVE-2026-72775 json | Not Provided | 2026-08-11 | 2026-08-11 | |
| CVE-2026-71276 json | Not Provided | 2026-08-05 | 2026-08-10 | |
| CVE-2026-70635 json | Not Provided | 2026-08-06 | 2026-08-07 | |
| CVE-2026-54291 json | pgjdbc is an open source postgresql JDBC Driver. In releases 42.7.4 through 42.7.11, channelBinding=require connections can b... | Not Provided | 2026-07-06 | 2026-07-09 |
| CVE-2026-42198 json | pgjdbc is an open source postgresql JDBC Driver. From version 42.2.0 to before version 42.7.11, pgjdbc is vulnerable to a cli... | Not Provided | 2026-04-29 | 2026-08-18 |
| CVE-2026-19385 json | Heap buffer overflow in PostgreSQL pg_dump of long function transform lists allows an object creator to execute arbitrary cod... | Not Provided | 2026-08-13 | 2026-08-19 |
| CVE-2026-18408 json | Untrusted data inclusion in pg_dump in PostgreSQL allows a malicious superuser of the origin server to inject arbitrary code ... | Not Provided | 2026-08-13 | 2026-08-19 |
| CVE-2026-18024 json | Buffer over-read in PostgreSQL ascii() SQL function allows a user to disclose up to 3 bytes after the end of a specific alloc... | Not Provided | 2026-08-13 | 2026-08-19 |
| CVE-2026-16241 json | Integer underflow in PostgreSQL ECPG allows a database server administrator to achieve temporary denial of service against th... | Not Provided | 2026-08-13 | 2026-08-19 |
| CVE-2026-16239 json | Type confusion in PostgreSQL "portal"/cursor lifecycle allows a user to execute arbitrary code as the operating system user r... | Not Provided | 2026-08-13 | 2026-08-19 |
| CVE-2026-16238 json | Type confusion in PostgreSQL pg_restore_attribute_stats() allows an object creator to execute arbitrary code as the operating... | Not Provided | 2026-08-13 | 2026-08-19 |
| CVE-2026-15742 json | Integer wraparound in PostgreSQL fuzzystrmatch allows a user to direct writes to a huge range of addresses, executing arbitra... | Not Provided | 2026-08-13 | 2026-08-19 |
| CVE-2026-15741 json | SQL injection in PostgreSQL EXTRACT() deparse allows an object owner to execute arbitrary SQL as a superuser via a hostile ob... | Not Provided | 2026-08-13 | 2026-08-19 |
Known software with vulnerabilities from Postgresql
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Postgresql | Postgresql | - |
| Application | Postgresql | Postgresql-common | - |
| Application | Postgresql | Postgresql Jdbc Driver | 42.0.0 |
| Application | Postgresql | Psqlodbc | 8.3.400 |