CL
Product
ClickHouse
On CISA KEVExploited in the wild
25
CVEs
1
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 5High 12Medium 8Low 0
Watch
Add ClickHouse to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-111497 In wildKEVNew | 9.8 | Oct 22 | Out-of-Bounds Write in Google Brotli Decoder Affected: through 26.10.2.103 |
| CVE-2023-47118 | 9.8 | Dec 20 | ClickHouse® is an open-source column-oriented database management system that allows generating analytical data reports in real-time Affected: 23.3 before 23.3.16.7; 23.8 before 23.8.6.16; 23.9 before 23.9.4.11; 23.10 before 23.10.2.13 |
| CVE-2019-16535 | 9.8 | Dec 30 | In all versions of ClickHouse before 19.14, an OOB read, OOB write and integer underflow in decompression algorithms can be used to achieve RCE or DoS via native protocol Affected: before 19.14 |
| CVE-2018-14671 | 9.8 | Aug 15 | In ClickHouse before 18.10.3, unixODBC allowed loading arbitrary shared objects from the file system which led to a Remote Code Execution vulnerability Affected: before 18.10.3 |
| CVE-2018-14670 | 9.8 | Aug 15 | Incorrect configuration in deb package in ClickHouse before 1.1.54131 could lead to unauthorized use of the database Affected: before 1.1.54131 |
Showing 5