DeutschShown in its original language — a full translation is planned for a future version.
PostgreSQL: Mehrere Schwachstellen
view advisory published 2026-02-12
Ein entfernter, authentisierter oder anonymer Angreifer kann mehrere Schwachstellen in PostgreSQL ausnutzen, um Informationen offenzulegen, beliebigen Code auszuführen und nicht näher bezeichnete Angriffe durchzuführen, was möglicherweise zu einer Ausweitung der Berechtigungen führen kann.
01
describes (5)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-2007US | — | — | ||
Heap buffer overflow in PostgreSQL pg_trgm allows a database user to achieve unknown impacts via a crafted input string. The attacker has limited control over the byte patterns to… | ||||
| CVE-2026-2006US | — | — | ||
Missing validation of multibyte character length in PostgreSQL text manipulation allows a database user to issue crafted queries that achieve a buffer overrun. That suffices to ex… | ||||
| CVE-2026-2005US | — | Exploit | ||
Heap buffer overflow in PostgreSQL pgcrypto allows a ciphertext provider to execute arbitrary code as the operating system user running the database. Versions before PostgreSQL 18… | ||||
| CVE-2026-2004US | — | — | ||
Missing validation of type of input in PostgreSQL intarray extension selectivity estimator function allows an object creator to execute arbitrary code as the operating system user… | ||||
| CVE-2026-2003US | — | — | ||
Improper validation of type "oidvector" in PostgreSQL allows a database user to disclose a few bytes of server memory. We have not ruled out viability of attacks that arrange for… | ||||
02
references
External citations — patches, advisories, analysis.
- Oracle Linux Security Advisory ELSA-2026-28208 vom 2026-06-26external
- Oracle Linux Security Advisory ELSA-2026-28999 vom 2026-06-26external
- Oracle Linux Security Advisory ELSA-2026-4064 vom 2026-03-11external
- Red Hat Security Advisory RHSA-2026:19009 vom 2026-05-19external
- Red Hat Security Advisory RHSA-2026:19010 vom 2026-05-19external
- Red Hat Security Advisory RHSA-2026:3730 vom 2026-03-04external
- Red Hat Security Advisory RHSA-2026:3887 vom 2026-03-05external
- Red Hat Security Advisory RHSA-2026:3896 vom 2026-03-05external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan