https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 14 Nov 2026 19:58:26 +0000 https://db.gcve.eu/vuln/certfr-2026-avi-1530 certfr-2026-avi-1530 https://db.gcve.eu/vuln/certfr-2026-avi-1530 https://db.gcve.eu/vuln/fkie_cve-2026-116328 <p>Integer wraparound in PostgreSQL generation memory contexts allows a database user to execute arbitrary code as the operating system user running the database, via freeing an allocation larger than 1 GB and causing its block to be reused for smaller chunks whose back-pointer offset cannot represent that position. Within major versions 16-18, minor versions before PostgreSQL 18.7, 17.12, and 16.16 are affected. Versions before PostgreSQL 16 are unaffected.</p> <p>Integer wraparound in PostgreSQL generation memory contexts allows a database user to execute arbitrary code as the operating system user running the database, via freeing an allocation larger than 1 GB and causing its block to be reused for smaller chunks whose back-pointer offset cannot represent that position. Within major versions 16-18, minor versions before PostgreSQL 18.7, 17.12, and 16.16 are affected. Versions before PostgreSQL 16 are unaffected.</p> https://db.gcve.eu/vuln/fkie_cve-2026-116328 https://db.gcve.eu/vuln/ghsa-38f3-w39j-87qm <p>Integer wraparound in PostgreSQL generation memory contexts allows a database user to execute arbitrary code as the operating system user running the database, via freeing an allocation larger than 1 GB and causing its block to be reused for smaller chunks whose back-pointer offset cannot represent that position. Within major versions 16-18, minor versions before PostgreSQL 18.7, 17.12, and 16.16 are affected. Versions before PostgreSQL 16 are unaffected.</p> <p>Integer wraparound in PostgreSQL generation memory contexts allows a database user to execute arbitrary code as the operating system user running the database, via freeing an allocation larger than 1 GB and causing its block to be reused for smaller chunks whose back-pointer offset cannot represent that position. Within major versions 16-18, minor versions before PostgreSQL 18.7, 17.12, and 16.16 are affected. Versions before PostgreSQL 16 are unaffected.</p> https://db.gcve.eu/vuln/ghsa-38f3-w39j-87qm https://db.gcve.eu/vuln/msrc_cve-2026-116328 msrc_CVE-2026-116328 https://db.gcve.eu/vuln/msrc_cve-2026-116328 https://db.gcve.eu/vuln/opensuse-su-2026:12551-1 <p>postgresql15-15.20-1.1 on GA media</p> <p>postgresql15-15.20-1.1 on GA media</p> https://db.gcve.eu/vuln/opensuse-su-2026:12551-1 https://db.gcve.eu/vuln/rhsa-2026:99821 <p>postgresql: postgresql: Arbitrary code execution via type confusion in data definition commands postgresql: postgresql: Privilege escalation via uncontrolled search path in extension management postgresql: postgresql: Persistent Denial of Service via arbitrary file append in sslkeylogfile parameter postgresql: postgresql: Security restriction bypass via INSERT ON CONFLICT on auto-updatable views postgresql: postgresql: Information disclosure in pg_basebackup via crafted backup manifest postgresql: postgresql: Arbitrary code execution via type confusion in SQL-language functions postgresql: PostgreSQL: Unauthorized execution of restricted cast functions via type conversion operations postgresql: postgresql: Arbitrary code execution via use-after-free in parallel worker coordination postgresql: postgresql: Arbitrary code execution via composite-value field assignment type confusion postgresql: postgresql: Arbitrary code execution via use-after-free in plperl postgresql: postgresql: Information disclosure via zero-length token in dict_int postgresql: postgresql: Arbitrary code execution via type confusion in PL/Perl postgresql: postgresql: Information disclosure via use-after-free in COPY FROM error reporting postgresql: postgresql: row-level security bypass via DROP OWNED postgresql: postgresql: Incorrect trigger row processing via partitioned table MERGE postgresql: postgresql: Privilege escalation via untrusted search path in vacuumdb postgresql: postgresql: Arbitrary code e…</p> <p>postgresql: postgresql: Arbitrary code execution via type confusion in data definition commands postgresql: postgresql: Privilege escalation via uncontrolled search path in extension management postgresql: postgresql: Persistent Denial of Service via arbitrary file append in sslkeylogfile parameter postgresql: postgresql: Security restriction bypass via INSERT ON CONFLICT on auto-updatable views postgresql: postgresql: Information disclosure in pg_basebackup via crafted backup manifest postgresql: postgresql: Arbitrary code execution via type confusion in SQL-language functions postgresql: PostgreSQL: Unauthorized execution of restricted cast functions via type conversion operations postgresql: postgresql: Arbitrary code execution via use-after-free in parallel worker coordination postgresql: postgresql: Arbitrary code execution via composite-value field assignment type confusion postgresql: postgresql: Arbitrary code execution via use-after-free in plperl postgresql: postgresql: Information disclosure via zero-length token in dict_int postgresql: postgresql: Arbitrary code execution via type confusion in PL/Perl postgresql: postgresql: Information disclosure via use-after-free in COPY FROM error reporting postgresql: postgresql: row-level security bypass via DROP OWNED postgresql: postgresql: Incorrect trigger row processing via partitioned table MERGE postgresql: postgresql: Privilege escalation via untrusted search path in vacuumdb postgresql: postgresql: Arbitrary code e…</p> https://db.gcve.eu/vuln/rhsa-2026:99821 https://db.gcve.eu/vuln/ubuntu-cve-2026-116328 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: postgresql-9.3, Ubuntu:Pro:16.04:LTS: postgresql-9.5, Ubuntu:Pro:18.04:LTS: postgresql-10, Ubuntu:20.04:LTS: postgresql-12, Ubuntu:22.04:LTS: postgresql-14, Ubuntu:24.04:LTS: postgresql-16, Ubuntu:26.10: postgresql-18, Ubuntu:26.04:LTS: postgresql-18</p> <p>Integer wraparound in PostgreSQL generation memory contexts allows a database user to execute arbitrary code as the operating system user running the database, via freeing an allocation larger than 1 GB and causing its block to be reused for smaller chunks whose back-pointer offset cannot represent that position. Within major versions 16-18, minor versions before PostgreSQL 18.7, 17.12, and 16.16 are affected. Versions before PostgreSQL 16 are unaffected.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: postgresql-9.3, Ubuntu:Pro:16.04:LTS: postgresql-9.5, Ubuntu:Pro:18.04:LTS: postgresql-10, Ubuntu:20.04:LTS: postgresql-12, Ubuntu:22.04:LTS: postgresql-14, Ubuntu:24.04:LTS: postgresql-16, Ubuntu:26.10: postgresql-18, Ubuntu:26.04:LTS: postgresql-18</p> <p>Integer wraparound in PostgreSQL generation memory contexts allows a database user to execute arbitrary code as the operating system user running the database, via freeing an allocation larger than 1 GB and causing its block to be reused for smaller chunks whose back-pointer offset cannot represent that position. Within major versions 16-18, minor versions before PostgreSQL 18.7, 17.12, and 16.16 are affected. Versions before PostgreSQL 16 are unaffected.</p> https://db.gcve.eu/vuln/ubuntu-cve-2026-116328 https://db.gcve.eu/vuln/wid-sec-w-2026-4571 <p>Ein Angreifer kann mehrere Schwachstellen in PostgreSQL ausnutzen, um beliebigen Code auszuführen, Berechtigungen zu erweitern, Sicherheitsmaßnahmen zu umgehen, SQL-Injection durchzuführen, Daten zu manipulieren und offenzulegen oder einen Denial-of-Service-Zustand zu verursachen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in PostgreSQL ausnutzen, um beliebigen Code auszuführen, Berechtigungen zu erweitern, Sicherheitsmaßnahmen zu umgehen, SQL-Injection durchzuführen, Daten zu manipulieren und offenzulegen oder einen Denial-of-Service-Zustand zu verursachen.</p> https://db.gcve.eu/vuln/wid-sec-w-2026-4571