InfraGuard
登录 立即试用 立即购买

PostgreSQL 漏洞（CVE 列表）

213 CVE10.0 最高 CVSS
检查您的版本psql --version

受影响的版本系列

已知漏洞

CVE 标题 受影响版本 CVSS 被利用 EPSS 发布日期
CVE-2026-120150 PostgreSQL expanded-record domain-check use-after-free executes arbitrary code ≥ 18 < 18.7 ≥ 17 < 17.12 ≥ 16 < 16.16 8.8 0.6% 2026-11-12
CVE-2026-120149 PostgreSQL FDW batch-insert mismatch executes arbitrary code ≥ 18 < 18.7 ≥ 17 < 17.12 ≥ 16 < 16.16 8.8 0.6% 2026-11-12
CVE-2026-120147 PostgreSQL dblink reentrant disconnect use-after-free executes arbitrary code ≥ 18 < 18.7 ≥ 17 < 17.12 ≥ 16 < 16.16 8.8 0.6% 2026-11-12
CVE-2026-120148 PostgreSQL extended-statistics pseudo-type confusion executes arbitrary code ≥ 18 < 18.7 ≥ 17 < 17.12 ≥ 16 < 16.16 8.1 0.5% 2026-11-12
CVE-2026-120145 PostgreSQL logical replication can write to subscriber system catalogs, executing arbitrary code ≥ 18 < 18.7 ≥ 17 < 17.12 ≥ 16 < 16.16 8.8 0.5% 2026-11-12
CVE-2026-116330 PostgreSQL pg_dump tar restore.sql fails to block psql command injection ≥ 18 < 18.7 ≥ 17 < 17.12 ≥ 16 < 16.16 8.8 0.4% 2026-11-12
CVE-2026-116328 PostgreSQL generation memory context integer wraparound executes arbitrary code ≥ 18 < 18.7 ≥ 17 < 17.12 ≥ 16 < 16.16 8.8 0.6% 2026-11-12
CVE-2026-116329 PostgreSQL statistics import type confusion executes arbitrary code ≥ 18 < 18.7 8.8 0.6% 2026-11-12
CVE-2026-116326 PostgreSQL plperl tied-object exceptions follow stale sigjmp_buf ≥ 18 < 18.7 ≥ 17 < 17.12 ≥ 16 < 16.16 8.8 0.6% 2026-11-12
CVE-2026-116323 PostgreSQL pltcl reentrant result conversion use-after-free executes arbitrary code ≥ 18 < 18.7 ≥ 17 < 17.12 ≥ 16 < 16.16 8.8 0.6% 2026-11-12
CVE-2026-14671 PostgreSQL refint plan cache type confusion executes arbitrary code ≥ 14.0 < 14.24 ≥ 15.0 < 15.19 ≥ 16.0 < 16.15 8.8 — 2026-08-13
CVE-2026-6471 PostgreSQL logical decoding can dlopen arbitrary file ≥ 14.0 < 14.24 ≥ 15.0 < 15.19 ≥ 16.0 < 16.15 7.2 — 2026-08-13
CVE-2026-6470 PostgreSQL fails to check type USAGE privilege ≥ 14.0 < 14.24 ≥ 15.0 < 15.19 ≥ 16.0 < 16.15 4.3 — 2026-08-13
CVE-2026-6464 PostgreSQL psql COPY FROM STDIN early failure processes data lines as psql commands ≥ 14.0 < 14.24 ≥ 15.0 < 15.19 ≥ 16.0 < 16.15 8.1 — 2026-08-13
CVE-2026-6469 PostgreSQL ALTER TABLE ALTER TYPE resets extended statistics ownership ≥ 14.0 < 14.24 ≥ 15.0 < 15.19 ≥ 16.0 < 16.15 3.8 — 2026-08-13
CVE-2026-19385 PostgreSQL pg_dump heap buffer overflow executes arbitrary code ≥ 14.0 < 14.24 ≥ 15.0 < 15.19 ≥ 16.0 < 16.15 8.8 — 2026-08-13
CVE-2026-18024 PostgreSQL ascii() function reads past end of buffer ≥ 14.0 < 14.24 ≥ 15.0 < 15.19 ≥ 16.0 < 16.15 4.3 — 2026-08-13
CVE-2026-18408 PostgreSQL psql \unrestrict lets superuser of pg_dump origin server execute arbitrary code in psql client ≥ 14.0 < 14.24 ≥ 15.0 < 15.19 ≥ 16.0 < 16.15 8.8 — 2026-08-13
CVE-2026-16239 PostgreSQL type confusion in cursor CLOSE + DECLARE executes arbitrary code ≥ 14.0 < 14.24 ≥ 15.0 < 15.19 ≥ 16.0 < 16.15 8.8 — 2026-08-13
CVE-2026-16241 PostgreSQL ECPG integer underflow can crash the client ≥ 14.0 < 14.24 ≥ 15.0 < 15.19 ≥ 16.0 < 16.15 3.8 — 2026-08-13
CVE-2026-16238 PostgreSQL type confusion in pg_restore_attribute_stats() executes arbitrary code ≥ 14.0 < 14.24 ≥ 15.0 < 15.19 ≥ 16.0 < 16.15 8.8 — 2026-08-13
CVE-2026-15741 PostgreSQL expression deparse allows SQL injection via EXTRACT argument ≥ 14.0 < 14.24 ≥ 15.0 < 15.19 ≥ 16.0 < 16.15 8.8 — 2026-08-13
CVE-2026-15742 PostgreSQL fuzzystrmatch writes effectively-arbitrary addresses, via integer wraparound ≥ 14.0 < 14.24 ≥ 15.0 < 15.19 ≥ 16.0 < 16.15 8.8 — 2026-08-13
CVE-2026-14680 PostgreSQL type confusion via "internal" arguments ≥ 14.0 < 14.24 ≥ 15.0 < 15.19 ≥ 16.0 < 16.15 8.8 — 2026-08-13
CVE-2026-14681 PostgreSQL improper enforcement of GSSAPI encryption when coupled with SSL ≥ 17.0 < 17.11 ≥ 18.0 < 18.5 4.2 — 2026-08-13
CVE-2026-14679 PostgreSQL stack buffer overflow in argument match writes 0x0 and 0x1 to server memory ≥ 14.0 < 14.24 ≥ 15.0 < 15.19 ≥ 16.0 < 16.15 8.2 — 2026-08-13
CVE-2026-14677 PostgreSQL 32-bit pltcl and plperl undersize allocations, via integer wraparound ≥ 14.0 < 14.24 ≥ 15.0 < 15.19 ≥ 16.0 < 16.15 8.8 — 2026-08-13
CVE-2026-14678 PostgreSQL pg_trgm picksplit reads past end of buffer ≥ 14.0 < 14.24 ≥ 15.0 < 15.19 ≥ 16.0 < 16.15 4.3 — 2026-08-13
CVE-2026-14676 PostgreSQL pg_stat_statements heap buffer overflow executes arbitrary code ≥ 18.0 < 18.5 8.8 — 2026-08-13
CVE-2026-14672 PostgreSQL observable response discrepancy with non-default scram_iterations provides user existence oracle ≥ 14.0 < 14.24 ≥ 15.0 < 15.19 ≥ 16.0 < 16.15 5.3 — 2026-08-13
CVE-2026-14673 PostgreSQL amcheck does not clear untrusted search path ≥ 14.0 < 14.24 ≥ 15.0 < 15.19 ≥ 16.0 < 16.15 3.8 — 2026-08-13
CVE-2026-14670 PostgreSQL plperl tied object heap buffer overflow executes arbitrary code ≥ 14.0 < 14.24 ≥ 15.0 < 15.19 ≥ 16.0 < 16.15 8.8 — 2026-08-13
CVE-2026-14668 PostgreSQL ctid type confusion in selectivity estimator discloses derivative of arbitrary read ≥ 14.0 < 14.24 ≥ 15.0 < 15.19 ≥ 16.0 < 16.15 8.1 — 2026-08-13
CVE-2026-14669 PostgreSQL to_char heap buffer overflow executes arbitrary code ≥ 14.0 < 14.24 ≥ 15.0 < 15.19 ≥ 16.0 < 16.15 8.8 — 2026-08-13
CVE-2026-14664 PostgreSQL regexp heap buffer overflow executes arbitrary code ≥ 14.0 < 14.24 ≥ 15.0 < 15.19 ≥ 16.0 < 16.15 8.8 — 2026-08-13
CVE-2026-14666 PostgreSQL row security caching disregards role modifications ≥ 14.0 < 14.24 ≥ 15.0 < 15.19 ≥ 16.0 < 16.15 4.2 — 2026-08-13
CVE-2026-14663 PostgreSQL pgcrypto, for OpenSSL-disabled ciphers, silently encrypts to and decrypts from cleartext ≥ 14.0 < 14.24 ≥ 15.0 < 15.19 ≥ 16.0 < 16.15 6.5 — 2026-08-13
CVE-2026-14662 PostgreSQL tsvector and tsquery undersize allocations, via integer wraparound ≥ 14.0 < 14.24 ≥ 15.0 < 15.19 ≥ 16.0 < 16.15 8.8 — 2026-08-13
CVE-2026-6637 PostgreSQL refint allows stack buffer overflow and SQL injection < 14.23 ≥ 15.0 < 15.18 ≥ 16.0 < 16.14 8.8 — 2026-05-14
CVE-2026-6638 PostgreSQL REFRESH PUBLICATION allows SQL injection via table name ≥ 16.0 < 16.14 ≥ 17.0 < 17.10 ≥ 18.0 < 18.4 3.7 — 2026-05-14
CVE-2026-6575 PostgreSQL pg_restore_attribute_stats accepts values that cause query planning to read past end of stats array ≥ 18.0 < 18.4 4.3 — 2026-05-14
CVE-2026-6478 PostgreSQL discloses MD5-hashed passwords via covert timing channel < 14.23 ≥ 15.0 < 15.18 ≥ 16.0 < 16.14 6.5 — 2026-05-14
CVE-2026-6479 PostgreSQL SSL/GSS init causes denial of service, via uncontrolled recursion < 14.23 ≥ 15.0 < 15.18 ≥ 16.0 < 16.14 7.5 — 2026-05-14
CVE-2026-6477 PostgreSQL libpq lo_* functions let server superuser overwrite client stack memory < 14.23 ≥ 15.0 < 15.18 ≥ 16.0 < 16.14 8.8 — 2026-05-14
CVE-2026-6475 PostgreSQL pg_basebackup and pg_rewind can overwrite unrelated files of origin superuser choice < 14.23 ≥ 15.0 < 15.18 ≥ 16.0 < 16.14 8.8 — 2026-05-14
CVE-2026-6476 PostgreSQL pg_createsubscriber allows SQL injection via subscription name ≥ 17.0 < 17.10 ≥ 18.0 < 18.4 7.2 — 2026-05-14
CVE-2026-6474 PostgreSQL timeofday() can disclose portions of server memory < 14.23 ≥ 15.0 < 15.18 ≥ 16.0 < 16.14 4.3 — 2026-05-14
CVE-2026-6473 PostgreSQL server undersizes allocations, via integer wraparound < 14.23 ≥ 15.0 < 15.18 ≥ 16.0 < 16.14 8.8 — 2026-05-14
CVE-2026-6472 PostgreSQL CREATE TYPE does not check multirange schema CREATE privilege < 14.23 ≥ 15.0 < 15.18 ≥ 16.0 < 16.14 5.4 — 2026-05-14
CVE-2026-2007 PostgreSQL pg_trgm heap buffer overflow writes pattern onto server memory ≥ 18.0 < 18.2 8.2 — 2026-02-12
CVE-2026-2006 PostgreSQL missing validation of multibyte character length executes arbitrary code ≥ 14.0 < 14.21 ≥ 15.0 < 15.16 ≥ 16.0 < 16.12 8.8 — 2026-02-12
CVE-2026-2005 PostgreSQL pgcrypto heap buffer overflow executes arbitrary code ≥ 14.0 < 14.21 ≥ 15.0 < 15.16 ≥ 16.0 < 16.12 8.8 — 2026-02-12
CVE-2026-2004 PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code ≥ 14.0 < 14.21 ≥ 15.0 < 15.16 ≥ 16.0 < 16.12 8.8 — 2026-02-12
CVE-2026-2003 PostgreSQL oidvector discloses a few bytes of memory ≥ 14.0 < 14.21 ≥ 15.0 < 15.16 4.3 — 2026-02-12
官方网站

在您自己的服务器上追踪这些版本

InfraGuard 从每台服务器收集已安装软件的版本，并标出存在已知漏洞的版本。自托管部署——数据不会离开您的网络。

试用在线演示 立即购买

每周已被利用漏洞摘要

每周一次，推送与自托管服务器相关的 KEV 新增条目。不发送其他邮件。

数据来源：CVE List（CVE® Program）、NVD、CISA KEV、FIRST EPSS（EPSS 详见 https://www.first.org/epss）、endoflife.date。软件列表：awesome-selfhosted（CC BY-SA 3.0）。