Comprueba tu versión
psql --versionRamas de versiones afectadas
- 18.5 10 CVE
- 18.4 38 CVE
- 18.2 49 CVE
- 18.0 54 CVE
- 17.11 9 CVE
- 17.10 35 CVE
- 17.8 45 CVE
- 17.1 49 CVE
- 17.0 53 CVE
- 16.15 9 CVE
- 16.14 35 CVE
- 16.12 44 CVE
- 16.5 48 CVE
- 16.4 52 CVE
- 16.3 53 CVE
- 16.0 57 CVE
- 15.19 8 CVE
- 15.18 34 CVE
- 15.16 42 CVE
- 15.9 46 CVE
- 15.8 50 CVE
- 15.7 51 CVE
- 15.6 52 CVE
- 15.5 53 CVE
- 15.4 56 CVE
- 15.3 58 CVE
- 15.2 60 CVE
- 15.0 62 CVE
- 14.24 8 CVE
- 14.23 34 CVE
- 14.21 42 CVE
- 14.14 46 CVE
- 14.13 50 CVE
- 14.12 51 CVE
- 14.11 52 CVE
- 14.10 53 CVE
- 14.9 56 CVE
- 14.8 57 CVE
- 14.7 59 CVE
- 14.5 60 CVE
- 14.3 61 CVE
- 14.0 65 CVE
- 13.17 16 CVE
- 13.16 20 CVE
- 13.14 21 CVE
- 13.13 22 CVE
- 13.12 25 CVE
- 13.11 26 CVE
- 13.10 28 CVE
- 13.8 29 CVE
- 13.7 30 CVE
- 13.5 31 CVE
- 13.4 34 CVE
- 13.3 35 CVE
- 13.2 38 CVE
- 13.1 40 CVE
- 13.0 43 CVE
- 12.21 16 CVE
- 12.20 20 CVE
- 12.18 21 CVE
- 12.17 22 CVE
- 12.16 25 CVE
- 12.15 26 CVE
- 12.14 28 CVE
- 12.12 29 CVE
- 12.11 30 CVE
- 12.9 31 CVE
- 12.8 34 CVE
- 12.7 35 CVE
- 12.6 38 CVE
- 12.5 39 CVE
- 12.4 42 CVE
- 12.3 44 CVE
- 12.2 46 CVE
- 12.0 46 CVE
- 11.22 16 CVE
- 11.21 19 CVE
- 11.20 20 CVE
- 11.17 22 CVE
- 11.16 23 CVE
- 11.14 24 CVE
- 11.13 27 CVE
- 11.12 28 CVE
- 11.11 31 CVE
- 11.10 32 CVE
- 11.9 35 CVE
- 11.8 37 CVE
- 11.7 38 CVE
- 11.5 39 CVE
- 11.4 43 CVE
- 11.3 44 CVE
- 11.2 48 CVE
- 11.1 49 CVE
- 11.0 50 CVE
- 10.22 18 CVE
- 10.21 19 CVE
- 10.19 20 CVE
- 10.17 23 CVE
- 10.15 25 CVE
- 10.14 28 CVE
- 10.13 30 CVE
- 10.12 31 CVE
- 10.10 32 CVE
- 10.9 35 CVE
- 10.8 36 CVE
- 10.6 39 CVE
- 10.5 40 CVE
- 10.4 42 CVE
- 10.3 43 CVE
- 10.1 46 CVE
- 10.0 49 CVE
- 9.6 49 CVE Fin de vida
- 9.5 53 CVE Fin de vida
- 9.4 55 CVE Fin de vida
- 9.3 61 CVE Fin de vida
- 9.2 61 CVE Fin de vida
- 9.1 65 CVE Fin de vida
- 9.0 69 CVE Fin de vida
- 8.5 42 CVE
- 8.4 74 CVE Fin de vida
- 8.3 73 CVE Fin de vida
- 8.2 74 CVE Fin de vida
- 8.1 80 CVE Fin de vida
- 8.0 82 CVE Fin de vida
- 7.4 82 CVE Fin de vida
- 7.3 74 CVE Fin de vida
- 7.2 69 CVE Fin de vida
- 7.1 60 CVE Fin de vida
- 7.0 59 CVE Fin de vida
- 6.5 63 CVE Fin de vida
- 6.4 52 CVE Fin de vida
- 6.3 62 CVE Fin de vida
- 6.2 52 CVE Fin de vida
- 6.1 52 CVE Fin de vida
- 6.0 52 CVE Fin de vida
- 1.09 52 CVE
- 1.02 52 CVE
- 1.01 52 CVE
- 1.0 52 CVE
Vulnerabilidades conocidas
| CVE | Título | Versiones afectadas | CVSS | Explotada | EPSS | Publicación |
|---|---|---|---|---|---|---|
| CVE-2026-120150 | PostgreSQL expanded-record domain-check use-after-free executes arbitrary code | ≥ 18 < 18.7 ≥ 17 < 17.12 ≥ 16 < 16.16 | 8.8 | 0.6% | 2026-11-12 | |
| CVE-2026-120149 | PostgreSQL FDW batch-insert mismatch executes arbitrary code | ≥ 18 < 18.7 ≥ 17 < 17.12 ≥ 16 < 16.16 | 8.8 | 0.6% | 2026-11-12 | |
| CVE-2026-120147 | PostgreSQL dblink reentrant disconnect use-after-free executes arbitrary code | ≥ 18 < 18.7 ≥ 17 < 17.12 ≥ 16 < 16.16 | 8.8 | 0.6% | 2026-11-12 | |
| CVE-2026-120148 | PostgreSQL extended-statistics pseudo-type confusion executes arbitrary code | ≥ 18 < 18.7 ≥ 17 < 17.12 ≥ 16 < 16.16 | 8.1 | 0.5% | 2026-11-12 | |
| CVE-2026-120145 | PostgreSQL logical replication can write to subscriber system catalogs, executing arbitrary code | ≥ 18 < 18.7 ≥ 17 < 17.12 ≥ 16 < 16.16 | 8.8 | 0.5% | 2026-11-12 | |
| CVE-2026-116330 | PostgreSQL pg_dump tar restore.sql fails to block psql command injection | ≥ 18 < 18.7 ≥ 17 < 17.12 ≥ 16 < 16.16 | 8.8 | 0.4% | 2026-11-12 | |
| CVE-2026-116328 | PostgreSQL generation memory context integer wraparound executes arbitrary code | ≥ 18 < 18.7 ≥ 17 < 17.12 ≥ 16 < 16.16 | 8.8 | 0.6% | 2026-11-12 | |
| CVE-2026-116329 | PostgreSQL statistics import type confusion executes arbitrary code | ≥ 18 < 18.7 | 8.8 | 0.6% | 2026-11-12 | |
| CVE-2026-116326 | PostgreSQL plperl tied-object exceptions follow stale sigjmp_buf | ≥ 18 < 18.7 ≥ 17 < 17.12 ≥ 16 < 16.16 | 8.8 | 0.6% | 2026-11-12 | |
| CVE-2026-116323 | PostgreSQL pltcl reentrant result conversion use-after-free executes arbitrary code | ≥ 18 < 18.7 ≥ 17 < 17.12 ≥ 16 < 16.16 | 8.8 | 0.6% | 2026-11-12 | |
| CVE-2026-14671 | PostgreSQL refint plan cache type confusion executes arbitrary code | ≥ 14.0 < 14.24 ≥ 15.0 < 15.19 ≥ 16.0 < 16.15 | 8.8 | — | 2026-08-13 | |
| CVE-2026-6471 | PostgreSQL logical decoding can dlopen arbitrary file | ≥ 14.0 < 14.24 ≥ 15.0 < 15.19 ≥ 16.0 < 16.15 | 7.2 | — | 2026-08-13 | |
| CVE-2026-6470 | PostgreSQL fails to check type USAGE privilege | ≥ 14.0 < 14.24 ≥ 15.0 < 15.19 ≥ 16.0 < 16.15 | 4.3 | — | 2026-08-13 | |
| CVE-2026-6464 | PostgreSQL psql COPY FROM STDIN early failure processes data lines as psql commands | ≥ 14.0 < 14.24 ≥ 15.0 < 15.19 ≥ 16.0 < 16.15 | 8.1 | — | 2026-08-13 | |
| CVE-2026-6469 | PostgreSQL ALTER TABLE ALTER TYPE resets extended statistics ownership | ≥ 14.0 < 14.24 ≥ 15.0 < 15.19 ≥ 16.0 < 16.15 | 3.8 | — | 2026-08-13 | |
| CVE-2026-19385 | PostgreSQL pg_dump heap buffer overflow executes arbitrary code | ≥ 14.0 < 14.24 ≥ 15.0 < 15.19 ≥ 16.0 < 16.15 | 8.8 | — | 2026-08-13 | |
| CVE-2026-18024 | PostgreSQL ascii() function reads past end of buffer | ≥ 14.0 < 14.24 ≥ 15.0 < 15.19 ≥ 16.0 < 16.15 | 4.3 | — | 2026-08-13 | |
| CVE-2026-18408 | PostgreSQL psql \unrestrict lets superuser of pg_dump origin server execute arbitrary code in psql client | ≥ 14.0 < 14.24 ≥ 15.0 < 15.19 ≥ 16.0 < 16.15 | 8.8 | — | 2026-08-13 | |
| CVE-2026-16239 | PostgreSQL type confusion in cursor CLOSE + DECLARE executes arbitrary code | ≥ 14.0 < 14.24 ≥ 15.0 < 15.19 ≥ 16.0 < 16.15 | 8.8 | — | 2026-08-13 | |
| CVE-2026-16241 | PostgreSQL ECPG integer underflow can crash the client | ≥ 14.0 < 14.24 ≥ 15.0 < 15.19 ≥ 16.0 < 16.15 | 3.8 | — | 2026-08-13 | |
| CVE-2026-16238 | PostgreSQL type confusion in pg_restore_attribute_stats() executes arbitrary code | ≥ 14.0 < 14.24 ≥ 15.0 < 15.19 ≥ 16.0 < 16.15 | 8.8 | — | 2026-08-13 | |
| CVE-2026-15741 | PostgreSQL expression deparse allows SQL injection via EXTRACT argument | ≥ 14.0 < 14.24 ≥ 15.0 < 15.19 ≥ 16.0 < 16.15 | 8.8 | — | 2026-08-13 | |
| CVE-2026-15742 | PostgreSQL fuzzystrmatch writes effectively-arbitrary addresses, via integer wraparound | ≥ 14.0 < 14.24 ≥ 15.0 < 15.19 ≥ 16.0 < 16.15 | 8.8 | — | 2026-08-13 | |
| CVE-2026-14680 | PostgreSQL type confusion via "internal" arguments | ≥ 14.0 < 14.24 ≥ 15.0 < 15.19 ≥ 16.0 < 16.15 | 8.8 | — | 2026-08-13 | |
| CVE-2026-14681 | PostgreSQL improper enforcement of GSSAPI encryption when coupled with SSL | ≥ 17.0 < 17.11 ≥ 18.0 < 18.5 | 4.2 | — | 2026-08-13 | |
| CVE-2026-14679 | PostgreSQL stack buffer overflow in argument match writes 0x0 and 0x1 to server memory | ≥ 14.0 < 14.24 ≥ 15.0 < 15.19 ≥ 16.0 < 16.15 | 8.2 | — | 2026-08-13 | |
| CVE-2026-14677 | PostgreSQL 32-bit pltcl and plperl undersize allocations, via integer wraparound | ≥ 14.0 < 14.24 ≥ 15.0 < 15.19 ≥ 16.0 < 16.15 | 8.8 | — | 2026-08-13 | |
| CVE-2026-14678 | PostgreSQL pg_trgm picksplit reads past end of buffer | ≥ 14.0 < 14.24 ≥ 15.0 < 15.19 ≥ 16.0 < 16.15 | 4.3 | — | 2026-08-13 | |
| CVE-2026-14676 | PostgreSQL pg_stat_statements heap buffer overflow executes arbitrary code | ≥ 18.0 < 18.5 | 8.8 | — | 2026-08-13 | |
| CVE-2026-14672 | PostgreSQL observable response discrepancy with non-default scram_iterations provides user existence oracle | ≥ 14.0 < 14.24 ≥ 15.0 < 15.19 ≥ 16.0 < 16.15 | 5.3 | — | 2026-08-13 | |
| CVE-2026-14673 | PostgreSQL amcheck does not clear untrusted search path | ≥ 14.0 < 14.24 ≥ 15.0 < 15.19 ≥ 16.0 < 16.15 | 3.8 | — | 2026-08-13 | |
| CVE-2026-14670 | PostgreSQL plperl tied object heap buffer overflow executes arbitrary code | ≥ 14.0 < 14.24 ≥ 15.0 < 15.19 ≥ 16.0 < 16.15 | 8.8 | — | 2026-08-13 | |
| CVE-2026-14668 | PostgreSQL ctid type confusion in selectivity estimator discloses derivative of arbitrary read | ≥ 14.0 < 14.24 ≥ 15.0 < 15.19 ≥ 16.0 < 16.15 | 8.1 | — | 2026-08-13 | |
| CVE-2026-14669 | PostgreSQL to_char heap buffer overflow executes arbitrary code | ≥ 14.0 < 14.24 ≥ 15.0 < 15.19 ≥ 16.0 < 16.15 | 8.8 | — | 2026-08-13 | |
| CVE-2026-14664 | PostgreSQL regexp heap buffer overflow executes arbitrary code | ≥ 14.0 < 14.24 ≥ 15.0 < 15.19 ≥ 16.0 < 16.15 | 8.8 | — | 2026-08-13 | |
| CVE-2026-14666 | PostgreSQL row security caching disregards role modifications | ≥ 14.0 < 14.24 ≥ 15.0 < 15.19 ≥ 16.0 < 16.15 | 4.2 | — | 2026-08-13 | |
| CVE-2026-14663 | PostgreSQL pgcrypto, for OpenSSL-disabled ciphers, silently encrypts to and decrypts from cleartext | ≥ 14.0 < 14.24 ≥ 15.0 < 15.19 ≥ 16.0 < 16.15 | 6.5 | — | 2026-08-13 | |
| CVE-2026-14662 | PostgreSQL tsvector and tsquery undersize allocations, via integer wraparound | ≥ 14.0 < 14.24 ≥ 15.0 < 15.19 ≥ 16.0 < 16.15 | 8.8 | — | 2026-08-13 | |
| CVE-2026-6637 | PostgreSQL refint allows stack buffer overflow and SQL injection | < 14.23 ≥ 15.0 < 15.18 ≥ 16.0 < 16.14 | 8.8 | — | 2026-05-14 | |
| CVE-2026-6638 | PostgreSQL REFRESH PUBLICATION allows SQL injection via table name | ≥ 16.0 < 16.14 ≥ 17.0 < 17.10 ≥ 18.0 < 18.4 | 3.7 | — | 2026-05-14 | |
| CVE-2026-6575 | PostgreSQL pg_restore_attribute_stats accepts values that cause query planning to read past end of stats array | ≥ 18.0 < 18.4 | 4.3 | — | 2026-05-14 | |
| CVE-2026-6478 | PostgreSQL discloses MD5-hashed passwords via covert timing channel | < 14.23 ≥ 15.0 < 15.18 ≥ 16.0 < 16.14 | 6.5 | — | 2026-05-14 | |
| CVE-2026-6479 | PostgreSQL SSL/GSS init causes denial of service, via uncontrolled recursion | < 14.23 ≥ 15.0 < 15.18 ≥ 16.0 < 16.14 | 7.5 | — | 2026-05-14 | |
| CVE-2026-6477 | PostgreSQL libpq lo_* functions let server superuser overwrite client stack memory | < 14.23 ≥ 15.0 < 15.18 ≥ 16.0 < 16.14 | 8.8 | — | 2026-05-14 | |
| CVE-2026-6475 | PostgreSQL pg_basebackup and pg_rewind can overwrite unrelated files of origin superuser choice | < 14.23 ≥ 15.0 < 15.18 ≥ 16.0 < 16.14 | 8.8 | — | 2026-05-14 | |
| CVE-2026-6476 | PostgreSQL pg_createsubscriber allows SQL injection via subscription name | ≥ 17.0 < 17.10 ≥ 18.0 < 18.4 | 7.2 | — | 2026-05-14 | |
| CVE-2026-6474 | PostgreSQL timeofday() can disclose portions of server memory | < 14.23 ≥ 15.0 < 15.18 ≥ 16.0 < 16.14 | 4.3 | — | 2026-05-14 | |
| CVE-2026-6473 | PostgreSQL server undersizes allocations, via integer wraparound | < 14.23 ≥ 15.0 < 15.18 ≥ 16.0 < 16.14 | 8.8 | — | 2026-05-14 | |
| CVE-2026-6472 | PostgreSQL CREATE TYPE does not check multirange schema CREATE privilege | < 14.23 ≥ 15.0 < 15.18 ≥ 16.0 < 16.14 | 5.4 | — | 2026-05-14 | |
| CVE-2026-2007 | PostgreSQL pg_trgm heap buffer overflow writes pattern onto server memory | ≥ 18.0 < 18.2 | 8.2 | — | 2026-02-12 | |
| CVE-2026-2006 | PostgreSQL missing validation of multibyte character length executes arbitrary code | ≥ 14.0 < 14.21 ≥ 15.0 < 15.16 ≥ 16.0 < 16.12 | 8.8 | — | 2026-02-12 | |
| CVE-2026-2005 | PostgreSQL pgcrypto heap buffer overflow executes arbitrary code | ≥ 14.0 < 14.21 ≥ 15.0 < 15.16 ≥ 16.0 < 16.12 | 8.8 | — | 2026-02-12 | |
| CVE-2026-2004 | PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code | ≥ 14.0 < 14.21 ≥ 15.0 < 15.16 ≥ 16.0 < 16.12 | 8.8 | — | 2026-02-12 | |
| CVE-2026-2003 | PostgreSQL oidvector discloses a few bytes of memory | ≥ 14.0 < 14.21 ≥ 15.0 < 15.16 | 4.3 | — | 2026-02-12 |
Controla estas versiones en tus propios servidores
InfraGuard recopila las versiones de software instaladas en cada servidor y señala las que tienen vulnerabilidades conocidas. Autoalojado: nada sale de tu red.
Datos: CVE List (CVE® Program), NVD, CISA KEV, FIRST EPSS (consulta EPSS en https://www.first.org/epss), endoflife.date. Lista de software: awesome-selfhosted (CC BY-SA 3.0).