PO
Database
PostgreSQL
212
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 8High 76Medium 40Low 8
Watch
Add PostgreSQL to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-6469 | 3.8 | Aug 13 | PostgreSQL ALTER TABLE ALTER TYPE resets extended statistics ownership Affected: 18 before 18.6; 17 before 17.11; 16 before 16.15; 15 before 15.19; before 14.24 |
| CVE-2026-16241 | 3.8 | Aug 13 | PostgreSQL ECPG integer underflow can crash the client Affected: 18 before 18.6; 17 before 17.11; 16 before 16.15; 15 before 15.19; before 14.24 |
| CVE-2026-14673 | 3.8 | Aug 13 | PostgreSQL amcheck does not clear untrusted search path Affected: 18 before 18.6; 16 before 16.15; 15 before 15.19; before 14.24 |
| CVE-2024-10977 | 3.7 | Nov 14 | PostgreSQL libpq retains an error message from man-in-the-middle Affected: 17 before 17.1; 16 before 16.5; 15 before 15.9; 14 before 14.14; 13 before 13.17; before 12.21 |
| CVE-2022-41862 | 3.7 | Mar 3 | In PostgreSQL, a modified, unauthenticated server can send an unterminated string during the establishment of Kerberos transport encryption Affected: postgresql 5.2, postgresql 14.7, postgresql 13.10, postgresql 12.14, postgresql 11.19 |
| CVE-2025-12817 | 3.1 | Nov 13 | PostgreSQL CREATE STATISTICS does not check for schema CREATE privilege Affected: 18 before 18.1; 17 before 17.7; 16 before 16.11; 15 before 15.15; 14 before 14.20; before 13.23 |
| CVE-2025-8713 | 3.1 | Aug 14 | PostgreSQL optimizer statistics can expose sampled data within a view, partition, or child table Affected: 17 before 17.6; 16 before 16.10; 15 before 15.14; 14 before 14.19; before 13.22 |
| CVE-2019-10209 | 2.2 | Oct 29 | Postgresql, versions 11.x before 11.5, is vulnerable to a memory disclosure in cross-type comparison for hashed subplan Affected: 11.0 before 11.5 |
Showing 8