PatchTheCVEpostgresql vulnerabilities
Recent CVEs affecting postgresql products. 28 tracked.
postgresql has 28 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 28. Most recent: 2026-08-13. Highest priority: CVE-2026-16239 (score 44/100).
- CVE-2026-6471 HIGH 7.2 UPGRADE Missing authorization in PostgreSQL logical decoding allows a non-superuser holding REPLICATION privilege to d
- CVE-2026-6470 MEDIUM 4.3 UPGRADE Missing authorization in PostgreSQL DDL commands allows an object creator to achieve denial of service against
- CVE-2026-6469 LOW 3.8 UPGRADE Incorrect ownership assignment in PostgreSQL ALTER TABLE ALTER TYPE command reassigns ownership of dependent s
- CVE-2026-6464 HIGH 8.1 UPGRADE Untrusted data inclusion in PostgreSQL psql COPY may allow a server administrator to elicit execution of data
- CVE-2026-19385 HIGH 8.8 UPGRADE Heap buffer overflow in PostgreSQL pg_dump of long function transform lists allows an object creator to execut
- CVE-2026-18408 HIGH 8.8 UPGRADE Untrusted data inclusion in pg_dump in PostgreSQL allows a malicious superuser of the origin server to inject
- CVE-2026-18024 MEDIUM 4.3 UPGRADE Buffer over-read in PostgreSQL ascii() SQL function allows a user to disclose up to 3 bytes after the end of a
- CVE-2026-16241 LOW 3.8 UPGRADE Integer underflow in PostgreSQL ECPG allows a database server administrator to achieve temporary denial of ser
- CVE-2026-16239 HIGH 8.8 UPGRADE Type confusion in PostgreSQL "portal"/cursor lifecycle allows a user to execute arbitrary code as the operatin
- CVE-2026-16238 HIGH 8.8 UPGRADE Type confusion in PostgreSQL pg_restore_attribute_stats() allows an object creator to execute arbitrary code a
- CVE-2026-15742 HIGH 8.8 UPGRADE Integer wraparound in PostgreSQL fuzzystrmatch allows a user to direct writes to a huge range of addresses, ex
- CVE-2026-15741 HIGH 8.8 UPGRADE SQL injection in PostgreSQL EXTRACT() deparse allows an object owner to execute arbitrary SQL as a superuser v
- CVE-2026-14681 MEDIUM 4.2 UPGRADE Improper enforcement of message integrity in PostgreSQL GSSAPI support allows a user to negotiate GSSAPI contr
- CVE-2026-14680 HIGH 8.8 UPGRADE Type confusion with PostgreSQL "internal" data type arguments allows any user to execute arbitrary code as the
- CVE-2026-14679 HIGH 8.2 UPGRADE Stack buffer overflow in PostgreSQL argument name matching allows an object creator to achieve unknown impacts
- CVE-2026-14678 MEDIUM 4.3 UPGRADE Buffer over-read in PostgreSQL pg_trgm index picksplit function reads past end of a heap buffer
- CVE-2026-14677 HIGH 8.8 UPGRADE Integer wraparound in PostgreSQL 32-bit builds of pltcl and plperl allows an object creator to cause the serve
- CVE-2026-14676 HIGH 8.8 UPGRADE Heap buffer overflow in PostgreSQL pg_stat_statements allows the query author to execute arbitrary code as the
- CVE-2026-14673 LOW 3.8 UPGRADE Untrusted search path in PostgreSQL amcheck allows a grantee of amcheck function EXECUTE privilege to execute
- CVE-2026-14672 MEDIUM 5.3 UPGRADE Observable response discrepancy in PostgreSQL SCRAM authentication allows an unauthenticated user to test the
- CVE-2026-14671 HIGH 8.8 UPGRADE Type confusion in PostgreSQL module "refint" allows an object creator to execute arbitrary code as the operati
- CVE-2026-14670 HIGH 8.8 UPGRADE Heap buffer overflow in PostgreSQL plperl return of a tied hash allows the function owner to execute arbitrary
- CVE-2026-14669 HIGH 8.8 UPGRADE Heap buffer overflow in PostgreSQL to_char(timestamptz) allows the party choosing the timezone to execute arbi
- CVE-2026-14668 HIGH 8.1 UPGRADE Type confusion regarding input of PostgreSQL ctid data type selectivity estimator allows an object creator to
- CVE-2026-14666 MEDIUM 4.2 UPGRADE Incomplete tracking in PostgreSQL of changes to role membership, role attributes, and database ownership allow
- CVE-2026-14664 HIGH 8.8 UPGRADE Heap buffer overflow in PostgreSQL regexp allows the query author to execute arbitrary code as the operating s
- CVE-2026-14663 MEDIUM 6.5 UPGRADE Cleartext storage in PostgreSQL pgcrypto disabled ciphers allows a user to recover cleartext, via direct obser
- CVE-2026-14662 HIGH 8.8 UPGRADE Integer wraparound in PostgreSQL tsvector and tsquery data type functions allows an unprivileged database user
FAQ
How do I fix postgresql vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is postgresql being exploited right now?
None of the tracked postgresql CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which postgresql CVE should I patch first?
CVE-2026-16239 currently ranks highest (44/100): Type confusion in PostgreSQL "portal"/cursor lifecycle allows a user to execute arbitrary code as the operatin.