バージョンを確認する
psql --version17.8 に影響するCVE
| CVE | タイトル | CVSS | 悪用 | EPSS | 公開日 |
|---|---|---|---|---|---|
| CVE-2026-16239 | PostgreSQL type confusion in cursor CLOSE + DECLARE executes arbitrary code | 8.8 | — | 2026-08-13 | |
| CVE-2026-18408 | PostgreSQL psql \unrestrict lets superuser of pg_dump origin server execute arbitrary code in psql client | 8.8 | — | 2026-08-13 | |
| CVE-2026-19385 | PostgreSQL pg_dump heap buffer overflow executes arbitrary code | 8.8 | — | 2026-08-13 | |
| CVE-2026-6473 | PostgreSQL server undersizes allocations, via integer wraparound | 8.8 | — | 2026-05-14 | |
| CVE-2026-6475 | PostgreSQL pg_basebackup and pg_rewind can overwrite unrelated files of origin superuser choice | 8.8 | — | 2026-05-14 | |
| CVE-2026-6477 | PostgreSQL libpq lo_* functions let server superuser overwrite client stack memory | 8.8 | — | 2026-05-14 | |
| CVE-2026-6637 | PostgreSQL refint allows stack buffer overflow and SQL injection | 8.8 | — | 2026-05-14 | |
| CVE-2026-14662 | PostgreSQL tsvector and tsquery undersize allocations, via integer wraparound | 8.8 | — | 2026-08-13 | |
| CVE-2026-14664 | PostgreSQL regexp heap buffer overflow executes arbitrary code | 8.8 | — | 2026-08-13 | |
| CVE-2026-14669 | PostgreSQL to_char heap buffer overflow executes arbitrary code | 8.8 | — | 2026-08-13 | |
| CVE-2026-14670 | PostgreSQL plperl tied object heap buffer overflow executes arbitrary code | 8.8 | — | 2026-08-13 | |
| CVE-2026-14671 | PostgreSQL refint plan cache type confusion executes arbitrary code | 8.8 | — | 2026-08-13 | |
| CVE-2026-14677 | PostgreSQL 32-bit pltcl and plperl undersize allocations, via integer wraparound | 8.8 | — | 2026-08-13 | |
| CVE-2026-14680 | PostgreSQL type confusion via "internal" arguments | 8.8 | — | 2026-08-13 | |
| CVE-2026-15741 | PostgreSQL expression deparse allows SQL injection via EXTRACT argument | 8.8 | — | 2026-08-13 | |
| CVE-2026-15742 | PostgreSQL fuzzystrmatch writes effectively-arbitrary addresses, via integer wraparound | 8.8 | — | 2026-08-13 | |
| CVE-2026-16238 | PostgreSQL type confusion in pg_restore_attribute_stats() executes arbitrary code | 8.8 | — | 2026-08-13 | |
| CVE-2026-116323 | PostgreSQL pltcl reentrant result conversion use-after-free executes arbitrary code | 8.8 | 0.6% | 2026-11-12 | |
| CVE-2026-116326 | PostgreSQL plperl tied-object exceptions follow stale sigjmp_buf | 8.8 | 0.6% | 2026-11-12 | |
| CVE-2026-116328 | PostgreSQL generation memory context integer wraparound executes arbitrary code | 8.8 | 0.6% | 2026-11-12 | |
| CVE-2026-116330 | PostgreSQL pg_dump tar restore.sql fails to block psql command injection | 8.8 | 0.4% | 2026-11-12 | |
| CVE-2026-120145 | PostgreSQL logical replication can write to subscriber system catalogs, executing arbitrary code | 8.8 | 0.5% | 2026-11-12 | |
| CVE-2026-120147 | PostgreSQL dblink reentrant disconnect use-after-free executes arbitrary code | 8.8 | 0.6% | 2026-11-12 | |
| CVE-2026-120149 | PostgreSQL FDW batch-insert mismatch executes arbitrary code | 8.8 | 0.6% | 2026-11-12 | |
| CVE-2026-120150 | PostgreSQL expanded-record domain-check use-after-free executes arbitrary code | 8.8 | 0.6% | 2026-11-12 | |
| CVE-2026-14679 | PostgreSQL stack buffer overflow in argument match writes 0x0 and 0x1 to server memory | 8.2 | — | 2026-08-13 | |
| CVE-2026-6464 | PostgreSQL psql COPY FROM STDIN early failure processes data lines as psql commands | 8.1 | — | 2026-08-13 | |
| CVE-2026-14668 | PostgreSQL ctid type confusion in selectivity estimator discloses derivative of arbitrary read | 8.1 | — | 2026-08-13 | |
| CVE-2026-120148 | PostgreSQL extended-statistics pseudo-type confusion executes arbitrary code | 8.1 | 0.5% | 2026-11-12 | |
| CVE-2026-6479 | PostgreSQL SSL/GSS init causes denial of service, via uncontrolled recursion | 7.5 | — | 2026-05-14 | |
| CVE-2026-6471 | PostgreSQL logical decoding can dlopen arbitrary file | 7.2 | — | 2026-08-13 | |
| CVE-2026-6476 | PostgreSQL pg_createsubscriber allows SQL injection via subscription name | 7.2 | — | 2026-05-14 | |
| CVE-2026-6478 | PostgreSQL discloses MD5-hashed passwords via covert timing channel | 6.5 | — | 2026-05-14 | |
| CVE-2026-14663 | PostgreSQL pgcrypto, for OpenSSL-disabled ciphers, silently encrypts to and decrypts from cleartext | 6.5 | — | 2026-08-13 | |
| CVE-2026-6472 | PostgreSQL CREATE TYPE does not check multirange schema CREATE privilege | 5.4 | — | 2026-05-14 | |
| CVE-2026-14672 | PostgreSQL observable response discrepancy with non-default scram_iterations provides user existence oracle | 5.3 | — | 2026-08-13 | |
| CVE-2026-18024 | PostgreSQL ascii() function reads past end of buffer | 4.3 | — | 2026-08-13 | |
| CVE-2026-6470 | PostgreSQL fails to check type USAGE privilege | 4.3 | — | 2026-08-13 | |
| CVE-2026-6474 | PostgreSQL timeofday() can disclose portions of server memory | 4.3 | — | 2026-05-14 | |
| CVE-2026-14678 | PostgreSQL pg_trgm picksplit reads past end of buffer | 4.3 | — | 2026-08-13 | |
| CVE-2026-14666 | PostgreSQL row security caching disregards role modifications | 4.2 | — | 2026-08-13 | |
| CVE-2026-14681 | PostgreSQL improper enforcement of GSSAPI encryption when coupled with SSL | 4.2 | — | 2026-08-13 | |
| CVE-2026-16241 | PostgreSQL ECPG integer underflow can crash the client | 3.8 | — | 2026-08-13 | |
| CVE-2026-6469 | PostgreSQL ALTER TABLE ALTER TYPE resets extended statistics ownership | 3.8 | — | 2026-08-13 | |
| CVE-2026-6638 | PostgreSQL REFRESH PUBLICATION allows SQL injection via table name | 3.7 | — | 2026-05-14 |
データ：CVE List（CVE® Program）、NVD、CISA KEV、FIRST EPSS（EPSS については https://www.first.org/epss を参照）、endoflife.date。ソフトウェア一覧：awesome-selfhosted（CC BY-SA 3.0）。