PO
Database
PostgreSQL
204
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 7High 73Medium 38Low 6
Watch
Add PostgreSQL to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-6469 | 3.8 | Aug 13 | PostgreSQL ALTER TABLE ALTER TYPE resets extended statistics ownership Affected: 18 before 18.6; 17 before 17.11; 16 before 16.15; 15 before 15.19; before 14.24 |
| CVE-2026-16241 | 3.8 | Aug 13 | PostgreSQL ECPG integer underflow can crash the client Affected: 18 before 18.6; 17 before 17.11; 16 before 16.15; 15 before 15.19; before 14.24 |
| CVE-2026-14673 | 3.8 | Aug 13 | PostgreSQL amcheck does not clear untrusted search path Affected: 18 before 18.6; 16 before 16.15; 15 before 15.19; before 14.24 |
| CVE-2024-10977 | 3.7 | Nov 14 | Client use of server error message in PostgreSQL allows a server not trusted under current SSL or GSS settings to furnish arbitrary non-NUL bytes to the libpq application Affected: 12.0 before 12.21; 13.0 before 13.17; 14.0 before 14.14; 15.0 before 15.9; 16.0 before 16.5; 17.0; +4 more |
| CVE-2022-41862 | 3.7 | Mar 3 | In PostgreSQL, a modified, unauthenticated server can send an unterminated string during the establishment of Kerberos transport encryption Affected: 12.0 before 12.14; 13.0 before 13.10; 14.0 before 14.7; 15.0 before 15.2 |
| CVE-2019-10209 | 2.2 | Oct 29 | Postgresql, versions 11.x before 11.5, is vulnerable to a memory disclosure in cross-type comparison for hashed subplan Affected: 11.0 before 11.5 |
Showing 6