PostgreSQL vulnerabilities
The newest vulnerabilities affecting PostgreSQL, up to 200. Subscribe by RSS.
- CVE-2026-110183PostgreSQL Anonymizer: statistics can expose some of the original data after statistic maskingDALIBO PostgreSQL Anonymizer
- CVE-2026-110182PostgreSQL Anonymizer: anon.partial() and anon.partial_email() can reveal the whole dataDALIBO PostgreSQL Anonymizer
- CVE-2026-110181PostgreSQL Anonymizer: Function declared with SQL-standard syntax leak anonymized dataDALIBO PostgreSQL Anonymizer
- CVE-2026-105620PostgreSQL Anonymizer: A masked role reads the authentic data of masked tables through a masking rule with a sub-queryDALIBO PostgreSQL Anonymizer
- CVE-2026-105619PostgreSQL Anonymizer: Masking rules of the tables are not applied through security_invoker viewsDALIBO PostgreSQL Anonymizer
- CVE-2026-105618PostgreSQL Anonymizer: Masked partitions and child tables are not masked when they are queried through their parentDALIBO PostgreSQL Anonymizer
- CVE-2026-105617PostgreSQL Anonymizer: Cached plans bypass transparent dynamic masking after a role change or a new masking ruleDALIBO PostgreSQL Anonymizer
- CVE-2026-105616PostgreSQL Anonymizer: The secret salt and shift of anon are readable by any role in pg_roles or pg_db_role_settingDALIBO PostgreSQL Anonymizer
- CVE-2026-105615PostgreSQL Anonymizer: Masked roles can read the statistics of masked columns in pg_statsDALIBO PostgreSQL Anonymizer
- CVE-2026-105614PostgreSQL Anonymizer: Unbounded image-decode memory allocation (DoS) in anon.image_blur()DALIBO PostgreSQL Anonymizer
- CVE-2026-105613PostgreSQL Anonymizer: Unbounded memory allocation (DoS) in range-based dummy functionsDALIBO PostgreSQL Anonymizer
- CVE-2026-105612PostgreSQL Anonymizer: Data-modifying CTEs bypass the read-only restriction of masked rolesDALIBO PostgreSQL Anonymizer
- CVE-2026-109448psqlODBC SQLBindParameter heap memory corruption when binding more than 32767 parametersPostgreSQL psqlODBC
- CVE-2026-104055Monitoring-user password logged in cleartext by postgres_exporter in postgresql VM charmCanonical postgresql-operator
- CVE-2026-97469PostgreSQL Anonymizer: RESTRICTED functions are reachable through a subLinkDALIBO PostgreSQL Anonymizer
- CVE-2026-83534PostgreSQL Anonymizer: Privilege escalation to superuser via anon.anonymize_database_parallel()DALIBO PostgreSQL Anonymizer
- CVE-2026-19634PostgreSQL Anonymizer: SQL injection in import_database_rules() and import_roles_rules() via crafted object names / JSONDALIBO PostgreSQL Anonymizer
- CVE-2026-19633PostgreSQL Anonymizer: unprivileged masked users can execute code via operators, domain casts and view subqueriesDALIBO PostgreSQL Anonymizer
- CVE-2026-85787An incomplete list of disallowed inputs in the SQL validation component of Amazon awslabs postgres-mcp-serverAmazon postgres-mcp-server
- CVE-2026-85620Postgres MCP Pro 0.3.0 Restricted-Mode Bypass via FROM-Clause Functioncrystaldba postgres-mcp
- CVE-2026-19475SQL Data Source Plugin: OOM DoS via $__timeGroup macroGrafana PostgreSQL Datasource · Grafana MySQL Datasource +2
- CVE-2026-14671PostgreSQL refint plan cache type confusion executes arbitrary codePostgreSQL
- CVE-2026-6471PostgreSQL logical decoding can dlopen arbitrary filePostgreSQL
- CVE-2026-6470PostgreSQL fails to check type USAGE privilegePostgreSQL
- CVE-2026-6469PostgreSQL ALTER TABLE ALTER TYPE resets extended statistics ownershipPostgreSQL
- CVE-2026-6464PostgreSQL psql COPY FROM STDIN early failure processes data lines as psql commandsPostgreSQL
- CVE-2026-19385PostgreSQL pg_dump heap buffer overflow executes arbitrary codePostgreSQL
- CVE-2026-18408PostgreSQL psql \unrestrict lets superuser of pg_dump origin server execute arbitrary code in psql clientPostgreSQL
- CVE-2026-18024PostgreSQL ascii() function reads past end of bufferPostgreSQL
- CVE-2026-16241PostgreSQL ECPG integer underflow can crash the clientPostgreSQL
- CVE-2026-16239PostgreSQL type confusion in cursor CLOSE + DECLARE executes arbitrary codePostgreSQL
- CVE-2026-16238PostgreSQL type confusion in pg_restore_attribute_stats() executes arbitrary codePostgreSQL
- CVE-2026-15742PostgreSQL fuzzystrmatch writes effectively-arbitrary addresses, via integer wraparoundPostgreSQL
- CVE-2026-15741PostgreSQL expression deparse allows SQL injection via EXTRACT argumentPostgreSQL
- CVE-2026-14681PostgreSQL improper enforcement of GSSAPI encryption when coupled with SSLPostgreSQL
- CVE-2026-14680PostgreSQL type confusion via "internal" argumentsPostgreSQL
- CVE-2026-14679PostgreSQL stack buffer overflow in argument match writes 0x0 and 0x1 to server memoryPostgreSQL
- CVE-2026-14678PostgreSQL pg_trgm picksplit reads past end of bufferPostgreSQL
- CVE-2026-14677PostgreSQL 32-bit pltcl and plperl undersize allocations, via integer wraparoundPostgreSQL
- CVE-2026-14676PostgreSQL pg_stat_statements heap buffer overflow executes arbitrary codePostgreSQL
- CVE-2026-14673PostgreSQL amcheck does not clear untrusted search pathPostgreSQL
- CVE-2026-14672PostgreSQL observable response discrepancy with non-default scram_iterations provides user existence oraclePostgreSQL
- CVE-2026-14670PostgreSQL plperl tied object heap buffer overflow executes arbitrary codePostgreSQL
- CVE-2026-14669PostgreSQL to_char heap buffer overflow executes arbitrary codePostgreSQL
- CVE-2026-14668PostgreSQL ctid type confusion in selectivity estimator discloses derivative of arbitrary readPostgreSQL
- CVE-2026-14666PostgreSQL row security caching disregards role modificationsPostgreSQL
- CVE-2026-14664PostgreSQL regexp heap buffer overflow executes arbitrary codePostgreSQL
- CVE-2026-14663PostgreSQL pgcrypto, for OpenSSL-disabled ciphers, silently encrypts to and decrypts from cleartextPostgreSQL
- CVE-2026-14662PostgreSQL tsvector and tsquery undersize allocations, via integer wraparoundPostgreSQL
- CVE-2026-13455PostgreSQL Anonymizer: Unrestricted function can leak the secret saltDALIBO PostgreSQL Anonymizer
- CVE-2026-11945PostgreSQL Anonymizer: SQL injection in the rules import functionsDALIBO PostgreSQL Anonymizer
- CVE-2026-9617PostgreSQL Anonymizer: malicious column name allows SQL injection via anon.k_anonymity() functionDALIBO PostgreSQL Anonymizer
- CVE-2026-8654Improper input validation in Delphix Continuous Data connectors allows an authenticated user to execute arbitrary operating system commands Delphix Continuous data IBM Db2 Connector · Delphix Con… +10
- CVE-2026-6638PostgreSQL REFRESH PUBLICATION allows SQL injection via table namePostgreSQL
- CVE-2026-6637PostgreSQL refint allows stack buffer overflow and SQL injectionPostgreSQL
- CVE-2026-6575PostgreSQL pg_restore_attribute_stats accepts values that cause query planning to read past end of stats arrayPostgreSQL
- CVE-2026-6479PostgreSQL SSL/GSS init causes denial of service, via uncontrolled recursionPostgreSQL
- CVE-2026-6478PostgreSQL discloses MD5-hashed passwords via covert timing channelPostgreSQL
- CVE-2026-6477PostgreSQL libpq lo_* functions let server superuser overwrite client stack memoryPostgreSQL
- CVE-2026-6476PostgreSQL pg_createsubscriber allows SQL injection via subscription namePostgreSQL
- CVE-2026-6475PostgreSQL pg_basebackup and pg_rewind can overwrite unrelated files of origin superuser choicePostgreSQL
- CVE-2026-6474PostgreSQL timeofday() can disclose portions of server memoryPostgreSQL
- CVE-2026-6473PostgreSQL server undersizes allocations, via integer wraparoundPostgreSQL
- CVE-2026-6472PostgreSQL CREATE TYPE does not check multirange schema CREATE privilegePostgreSQL
- CVE-2026-2007PostgreSQL pg_trgm heap buffer overflow writes pattern onto server memoryPostgreSQL
- CVE-2026-2006PostgreSQL missing validation of multibyte character length executes arbitrary codePostgreSQL
- CVE-2026-2005PostgreSQL pgcrypto heap buffer overflow executes arbitrary codePostgreSQL
- CVE-2026-2004PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary codePostgreSQL
- CVE-2026-2003PostgreSQL oidvector discloses a few bytes of memoryPostgreSQL
- CVE-2026-2361Improper search_path protection in PostgreSQL Anonymizer 2.5 allows any user with create privilege to gain superuser privilegesDALIBO PostgreSQL Anonymizer
- CVE-2026-2360Improper search_path protection in PostgreSQL Anonymizer 2.5 allows any user to gain superuser privileges in PostgreSQL 14DALIBO PostgreSQL Anonymizer
- CVE-2026-0949PEM versions prior to 9.8.1 are affected by a stored Cross-site Scripting (XSS) vulnerability that allows users with access to the Manage ChEnterpriseDB Postgres Enterprise Manager
- CVE-2025-12818PostgreSQL libpq undersizes allocations, via integer wraparoundPostgreSQL
- CVE-2025-12817PostgreSQL CREATE STATISTICS does not check for schema CREATE privilegePostgreSQL
- CVE-2025-8715PostgreSQL pg_dump newline in object name executes arbitrary code in psql client and in restore target serverPostgreSQL
- CVE-2025-8714PostgreSQL pg_dump lets superuser of origin server execute arbitrary code in psql clientPostgreSQL
- CVE-2025-8713PostgreSQL optimizer statistics can expose sampled data within a view, partition, or child tablePostgreSQL
- CVE-2025-5690Cursor allows PostgreSQL Anonymizer masked user to gain unauthorized access to authentic dataDALIBO PostgreSQL Anonymizer
- CVE-2025-4207PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validationPostgreSQL
- CVE-2025-1094PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validationPostgreSQL
- CVE-2024-10979PostgreSQL PL/Perl environment variable changes execute arbitrary codePostgreSQL
- CVE-2024-10978PostgreSQL SET ROLE, SET SESSION AUTHORIZATION reset to wrong user IDPostgreSQL
- CVE-2024-10977PostgreSQL libpq retains an error message from man-in-the-middlePostgreSQL
- CVE-2024-10976PostgreSQL row security below e.g. subqueries disregards user ID changesPostgreSQL
- CVE-2024-7348PostgreSQL relation replacement during pg_dump executes arbitrary SQLPostgreSQL
- CVE-2024-4317PostgreSQL pg_stats_ext and pg_stats_ext_exprs lack authorization checksPostgreSQL
- CVE-2024-2339Improper Input Validation in PostgreSQL Anonymizer 1.2 allows table owner to gain superuser privileges via masking ruleDALIBO PostgreSQL Anonymizer
- CVE-2024-2338SQL Injection in PostgreSQL Anonymizer 1.2 allows table owner to gain superuser privileges via masking ruleDALIBO PostgreSQL Anonymizer
- CVE-2024-0985PostgreSQL non-owner REFRESH MATERIALIZED VIEW CONCURRENTLY executes arbitrary SQLPostgreSQL
- CVE-2023-2454schema_element defeats protective search_path changes; It was found that certain database calls in PostgreSQL could permit an authed attackepostgresql
- CVE-2023-2455Row security policies disregard user ID changes after inlining; PostgreSQL could permit incorrect policies to be applied in certain cases whpostgresql
- CVE-2023-31136PostgresNIO processes unencrypted bytes from man-in-the-middlevapor postgres-nio
- CVE-2022-41862In PostgreSQL, a modified, unauthenticated server can send an unterminated string during the establishment of Kerberos transport encryption.postgresql
- CVE-2022-1552A flaw was found in PostgreSQL.postgresql
- CVE-2022-2625A vulnerability was found in PostgreSQL.postgresql
- CVE-2021-23214When the server is configured to use trust authentication with a clientcert requirement or to use cert authentication, a man-in-the-middle apostgresql
- CVE-2021-23222A man-in-the-middle attacker can inject false responses to the client's first few queries, despite the use of SSL certificate verification apostgresql
- CVE-2021-3677A flaw was found in postgresql.postgresql
- CVE-2021-32028A flaw was found in postgresql.postgresql
- CVE-2021-32029A flaw was found in postgresql.postgresql
- CVE-2021-32027A flaw was found in postgresql in versions before 13.3, before 12.7, before 11.12, before 10.17 and before 9.6.22.postgresql
- CVE-2021-3393An information leak was discovered in postgresql in versions before 13.2, before 12.6 and before 11.11.postgresql
- CVE-2019-10128A vulnerability was found in postgresql versions 11.x prior to 11.3.postgresql
- CVE-2019-10127A vulnerability was found in postgresql versions 11.x prior to 11.3.postgresql
- CVE-2021-20229A flaw was found in PostgreSQL in versions before 13.2.PostgreSQL
- CVE-2020-25696A flaw was found in the psql interactive terminal of PostgreSQL in versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6PostgreSQL
- CVE-2020-25695A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24.postgresql
- CVE-2020-25694A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24.postgresql
- CVE-2020-10733The Windows installer for PostgreSQL 9.5 - 12 invokes system-provided executables that do not have fully-qualified paths.PostgreSQL
- CVE-2020-14350It was found that some PostgreSQL extensions did not use search_path safely in their installation script.PostgreSQL
- CVE-2020-14349It was found that PostgreSQL versions before 12.4, before 11.9 and before 10.14 did not properly sanitize the search_path during logical repPostgreSQL
- CVE-2020-1720A flaw was found in PostgreSQL's "ALTER ...Red Hat postgresql
- CVE-2015-0241The to_char function in PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1 allowPostgreSQL Global Development Group PostgreSQL
- CVE-2015-0242Stack-based buffer overflow in the *printf function implementations in PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9PostgreSQL Global Development Group PostgreSQL
- CVE-2015-0243Multiple buffer overflows in contrib/pgcrypto in PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, andPostgreSQL Global Development Group PostgreSQL
- CVE-2015-0244PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1 does not properly handle erroPostgreSQL Global Development Group PostgreSQL
- CVE-2014-8161PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1 allows remote authenticated uPostgreSQL Global Development Group PostgreSQL
- CVE-2015-3166The snprintf implementation in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x before 9.3.7, and 9.4.x before 9.4.PostgreSQL Global Development Group PostgreSQL
- CVE-2015-3167contrib/pgcrypto in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x before 9.3.7, and 9.4.x before 9.4.2 uses diffPostgreSQL Global Development Group PostgreSQL
- CVE-2019-3466The pg_ctlcluster script in postgresql-common in versions prior to 210 didn't drop privileges when creating socket/statistics temporary direpostgresql-common
- CVE-2019-10211Postgresql Windows installer before versions 11.5, 10.10, 9.6.15, 9.5.19, 9.4.24 is vulnerable via bundled OpenSSL executing code from unpropostgresql
- CVE-2019-10208A flaw was discovered in postgresql versions 9.4.x before 9.4.24, 9.5.x before 9.5.19, 9.6.x before 9.6.15, 10.x before 10.10 and 11.x beforpostgresql
- CVE-2019-10209Postgresql, versions 11.x before 11.5, is vulnerable to a memory disclosure in cross-type comparison for hashed subplan.postgresql
- CVE-2019-10210Postgresql Windows installer before versions 11.5, 10.10, 9.6.15, 9.5.19, 9.4.24 is vulnerable via superuser writing password to unprotectedpostgresql
- CVE-2019-10130A vulnerability was found in PostgreSQL versions 11.x up to excluding 11.3, 10.x up to excluding 10.8, 9.6.x up to, excluding 9.6.13, 9.5.x PostgreSQL Project postgresql
- CVE-2019-10129A vulnerability was found in postgresql versions 11.x prior to 11.3.PostgreSQL Project postgresql
- CVE-2019-10164PostgreSQL versions 10.x before 10.9 and versions 11.x before 11.4 are vulnerable to a stack-based buffer overflow.PostgreSQL
- CVE-2018-16850postgresql before versions 11.1, 10.6 is vulnerable to a to SQL injection in pg_upgrade and pg_dump via CREATE TRIGGER ...The PostgreSQL Project postgresql
- CVE-2018-10936A weakness was found in postgresql-jdbc before version 42.2.5.[UNKNOWN] PostgreSQL · org.postgresql:pgjdbc-aggregate
- CVE-2018-10925It was discovered that PostgreSQL versions before 10.5, 9.6.10, 9.5.14, 9.4.19, and 9.3.24 failed to properly check authorization on certainPostgreSQL Global Development Group postgresql
- CVE-2018-10915A vulnerability was found in libpq, the default PostgreSQL client library where libpq failed to properly reset its internal state between coPostgreSQL Global Development Group postgresql
- CVE-2017-15097Privilege escalation flaws were found in the Red Hat initialization scripts of PostgreSQL.Red Hat postgresql init script
- CVE-2018-1115postgresql before versions 10.4, 9.6.9 is vulnerable in the adminpack extension, the pg_catalog.pg_logfile_rotate() function doesn't follow postgresql
- CVE-2018-1058A flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other users.The PostgreSQL Global Development Group postgresql
- CVE-2017-14798local privilege escalation in SUSE postgresql init scriptsuse postgresql-init
- CVE-2018-1052Memory disclosure vulnerability in table partitioning was found in postgresql 10.x before 10.2, allowing an authenticated attacker to read aThe PostgreSQL Global Development Group postgresql
- CVE-2018-1053In postgresql 9.3.x before 9.3.21, 9.4.x before 9.4.16, 9.5.x before 9.5.11, 9.6.x before 9.6.7 and 10.x before 10.2, pg_upgrade creates filThe PostgreSQL Global Development Group postgresql
- CVE-2017-12172PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before 9.5.10, 9.4.x before 9.4.15, 9.3.x before 9.3.20, and 9.2.x before 9.2.24 runsRed Hat postgresql
- CVE-2017-15099INSERT ...Red Hat postgresql
- CVE-2017-15098Invalid json_populate_recordset or jsonb_populate_recordset function calls in PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before Red Hat postgresql
- CVE-2017-8806The Debian pg_ctlcluster, pg_createcluster, and pg_upgradecluster scripts, as distributed in the Debian postgresql-common package before 181PostgreSQL-related scripts that are specific to Debian and…
- CVE-2017-7546PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to incorrect authentication flaw allowing remote attackerspostgresql
- CVE-2017-7547PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing remote authenticated attackpostgresql
- CVE-2017-7548PostgreSQL versions before 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing remote authenticated attackers with no privpostgresql
- CVE-2017-7484It was found that some selectivity estimation functions in PostgreSQL before 9.2.21, 9.3.x before 9.3.17, 9.4.x before 9.4.12, 9.5.x before The PostgreSQL Global Development Group PostgreSQL
- CVE-2017-7485In PostgreSQL 9.3.x before 9.3.17, 9.4.x before 9.4.12, 9.5.x before 9.5.7, and 9.6.x before 9.6.3, it was found that the PGREQUIRESSL envirThe PostgreSQL Global Development Group PostgreSQL
- CVE-2017-7486PostgreSQL versions 8.4 - 9.6 are vulnerable to information leak in pg_user_mappings view which discloses foreign server passwords to any usThe PostgreSQL Global Development Group PostgreSQL