https://cvebrief.com/archive/cves/vendor/postgresql/ High and critical PostgreSQL vulnerabilities covered by CVE Brief, with independent analyst commentary. en-us Fri, 14 Aug 2026 12:00:00 GMT https://cvebrief.com/cve/cve-2026-14662/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-postgresql-CVE-2026-14662 Fri, 14 Aug 2026 12:00:00 GMT Integer wraparound in PostgreSQL tsvector and tsquery data type functions allows an unprivileged database user to cause the server to undersize an allocation and write out-of-bounds, via crafted large inputs Fix documented: 18.6 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-14664/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-postgresql-CVE-2026-14664 Fri, 14 Aug 2026 12:00:00 GMT Heap buffer overflow in PostgreSQL regexp allows the query author to execute arbitrary code as the operating system user running the database, via text that would not pass encoding validation Fix documented: 18.6 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-14669/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-postgresql-CVE-2026-14669 Fri, 14 Aug 2026 12:00:00 GMT Heap buffer overflow in PostgreSQL to_char(timestamptz) allows the party choosing the timezone to execute arbitrary code as the operating system user running the database, via a long POSIX timezone abbreviation Fix documented: 18.6 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-14670/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-postgresql-CVE-2026-14670 Fri, 14 Aug 2026 12:00:00 GMT Heap buffer overflow in PostgreSQL plperl return of a tied hash allows the function owner to execute arbitrary code as the operating system user running the database, via a crafted function body Fix documented: 18.6 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-14671/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-postgresql-CVE-2026-14671 Fri, 14 Aug 2026 12:00:00 GMT Type confusion in PostgreSQL module "refint" allows an object creator to execute arbitrary code as the operating system user running the database Fix documented: 18.6 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-14676/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-postgresql-CVE-2026-14676 Fri, 14 Aug 2026 12:00:00 GMT Heap buffer overflow in PostgreSQL pg_stat_statements allows the query author to execute arbitrary code as the operating system user running the database, via crafted queries containing array constants Fix documented: 18.6 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-14677/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-postgresql-CVE-2026-14677 Fri, 14 Aug 2026 12:00:00 GMT Integer wraparound in PostgreSQL 32-bit builds of pltcl and plperl allows an object creator to cause the server to undersize an allocation and write out-of-bounds via crafted function bodies Fix documented: 18.6 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-14680/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-postgresql-CVE-2026-14680 Fri, 14 Aug 2026 12:00:00 GMT Type confusion with PostgreSQL "internal" data type arguments allows any user to execute arbitrary code as the operating system user running the database, via calls to functions with that argument type Fix documented: 18.6 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-15741/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-postgresql-CVE-2026-15741 Fri, 14 Aug 2026 12:00:00 GMT SQL injection in PostgreSQL EXTRACT() deparse allows an object owner to execute arbitrary SQL as a superuser via a hostile object definition Fix documented: 18.6 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-15742/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-postgresql-CVE-2026-15742 Fri, 14 Aug 2026 12:00:00 GMT Integer wraparound in PostgreSQL fuzzystrmatch allows a user to direct writes to a huge range of addresses, executing arbitrary code as the operating system user running the database, via extreme inputs to SQL function levenshtein() or levenshtein_less_equal() Fix documented: 18.6 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-16238/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-postgresql-CVE-2026-16238 Fri, 14 Aug 2026 12:00:00 GMT Type confusion in PostgreSQL pg_restore_attribute_stats() allows an object creator to execute arbitrary code as the operating system user running the database, via conflation of range and multirange values Fix documented: 18.6 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-16239/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-postgresql-CVE-2026-16239 Fri, 14 Aug 2026 12:00:00 GMT Type confusion in PostgreSQL "portal"/cursor lifecycle allows a user to execute arbitrary code as the operating system user running the database, via re-creation of a cursor or other portal with different types Fix documented: 18.6 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-18408/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-postgresql-CVE-2026-18408 Fri, 14 Aug 2026 12:00:00 GMT Untrusted data inclusion in pg_dump in PostgreSQL allows a malicious superuser of the origin server to inject arbitrary code for restore-time execution as the client operating system account running psql to restore the dump, via psql \restrict meta-command input expansion Fix documented: 18.6 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-19385/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-postgresql-CVE-2026-19385 Fri, 14 Aug 2026 12:00:00 GMT Heap buffer overflow in PostgreSQL pg_dump of long function transform lists allows an object creator to execute arbitrary code as the operating system user running pg_dump, via a crafted transform list Fix documented: 18.6 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-6473/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-postgresql-CVE-2026-6473 Fri, 15 May 2026 12:00:00 GMT Integer wraparound in multiple PostgreSQL server features allows an unprivileged database user to cause the server to undersize an allocation and write out-of-bounds Fix documented: 18.4 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-6475/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-postgresql-CVE-2026-6475 Fri, 15 May 2026 12:00:00 GMT Symlink following in PostgreSQL pg_basebackup plain format and in pg_rewind allows an origin superuser to overwrite local files, e Fix documented: 18.4 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-6477/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-postgresql-CVE-2026-6477 Fri, 15 May 2026 12:00:00 GMT Use of inherently dangerous function PQfn( Fix documented: 18.4 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-6637/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-postgresql-CVE-2026-6637 Fri, 15 May 2026 12:00:00 GMT Stack buffer overflow in PostgreSQL module "refint" allows an unprivileged database user to execute arbitrary code as the operating system user running the database Fix documented: 18.4 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-4427/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-postgresql-CVE-2026-4427 Fri, 20 Mar 2026 12:00:00 GMT A flaw was found in pgproto3 Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-2004/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-postgresql-CVE-2026-2004 Fri, 13 Feb 2026 12:00:00 GMT Missing validation of type of input in PostgreSQL intarray extension selectivity estimator function allows an object creator to execute arbitrary code as the operating system user running the database Fix documented: 18.2 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-2005/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-postgresql-CVE-2026-2005 Fri, 13 Feb 2026 12:00:00 GMT Heap buffer overflow in PostgreSQL pgcrypto allows a ciphertext provider to execute arbitrary code as the operating system user running the database Fix documented: 18.2 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-2006/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-postgresql-CVE-2026-2006 Fri, 13 Feb 2026 12:00:00 GMT Missing validation of multibyte character length in PostgreSQL text manipulation allows a database user to issue crafted queries that achieve a buffer overrun Fix documented: 18.2 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-2007/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-postgresql-CVE-2026-2007 Fri, 13 Feb 2026 12:00:00 GMT Heap buffer overflow in PostgreSQL pg_trgm allows a database user to achieve unknown impacts via a crafted input string Fix documented: 18.2 (CVE record). Independent analyst report on CVE Brief.