CVE-2026-120152

A flaw was found in PostgreSQL. An authenticated database user can trigger a use-after-free vulnerability by loading a module while the pgshowallsettings function is scanning custom-variable placeholders that the module replaces and frees. Successful exploitation allows the user to read internal...

CVE-2026-120152

Use after free in PostgreSQL pgshowallsettings allows a database user to retrieve memory contents, via loading a module while the function is scanning custom-variable placeholders that the module replaces and frees. Within major versions 16-18, minor versions before PostgreSQL 18.7, 17.12, and...

CVE-2026-120152

A use-after-free vulnerability in the PostgreSQL pg_show_all_settings() function allows a database user to disclose memory contents. This occurs when a module is loaded while the function is scanning custom-variable placeholders, which the module then replaces and frees. Affected versions include...

EUVD-2026-124426

Use after free in PostgreSQL pgshowallsettings allows a database user to retrieve memory contents, via loading a module while the function is scanning custom-variable placeholders that the module replaces and frees. Within major versions 16-18, minor versions before PostgreSQL 18.7, 17.12, and...

CVE-2026-120152

Use after free in PostgreSQL pgshowallsettings allows a database user to retrieve memory contents, via loading a module while the function is scanning custom-variable placeholders that the module replaces and frees. Within major versions 16-18, minor versions before PostgreSQL 18.7, 17.12, and...

CVE-2026-120152 PostgreSQL pg_show_all_settings() use-after-free discloses memory

Use after free in PostgreSQL pgshowallsettings allows a database user to retrieve memory contents, via loading a module while the function is scanning custom-variable placeholders that the module replaces and frees. Within major versions 16-18, minor versions before PostgreSQL 18.7, 17.12, and...

PT-2026-145838

Use after free in PostgreSQL pg show all settings allows a database user to retrieve memory contents, via loading a module while the function is scanning custom-variable placeholders that the module replaces and frees. Within major versions 16-18, minor versions before PostgreSQL 18.7, 17.12, and...

CVE-2026-120152: n/a PostgreSQL: Use after free in PostgreSQL pg_show_all_settings() allows a database user to retrieve memory contents, via loading a…

Use after free in PostgreSQL pgshowallsettings allows a database user to retrieve memory contents, via loading a module while the function is scanning custom-variable placeholders that the module replaces and frees. Within major versions 16-18, minor versions before PostgreSQL 18.7, 17.12, and...

Vulnerability in core server (CVE-2026-120152)

PostgreSQL pgshowallsettings use-after-free discloses memory Use after free in PostgreSQL pgshowallsettings allows a database user to retrieve memory contents, via loading a module while the function is scanning custom-variable placeholders that the module replaces and frees. Within major version...