7 matches found
CVE-2026-116332
A flaw was found in PostgreSQL. This vulnerability allows an authenticated database user with object creation privileges to execute arbitrary code with the permissions of the operating system user running the database service. The issue stems from a use-after-free flaw accessing memory after it h...
EUVD-2026-124512
Use after free in PostgreSQL portal setup allows an object creator to execute arbitrary code as the operating system user running the database, via running user-defined code during planning or executor startup that closes the portal currently being prepared. Versions before PostgreSQL 18.7, 17.12...
CVE-2026-116332 PostgreSQL portal setup use-after-free executes arbitrary code
Use after free in PostgreSQL portal setup allows an object creator to execute arbitrary code as the operating system user running the database, via running user-defined code during planning or executor startup that closes the portal currently being prepared. Versions before PostgreSQL 18.7, 17.12...
CVE-2026-116332
PostgreSQL versions prior to 18.7, 17.12, 16.16, 15.20, and 14.25 are vulnerable to a use-after-free flaw during portal setup. An object creator can execute arbitrary code as the operating system user running the database by running user-defined code during planning or executor startup that close...
Vulnerability in core server (CVE-2026-116332)
PostgreSQL portal setup use-after-free executes arbitrary code Use after free in PostgreSQL portal setup allows an object creator to execute arbitrary code as the operating system user running the database, via running user-defined code during planning or executor startup that closes the portal...
PT-2026-145822
Use after free in PostgreSQL portal setup allows an object creator to execute arbitrary code as the operating system user running the database, via running user-defined code during planning or executor startup that closes the portal currently being prepared. Versions before PostgreSQL 18.7, 17.12...
CVE-2026-116332: n/a PostgreSQL: Use after free in PostgreSQL portal setup allows an object creator to execute arbitrary code as the operating system…
Use after free in PostgreSQL portal setup allows an object creator to execute arbitrary code as the operating system user running the database, via running user-defined code during planning or executor startup that closes the portal currently being prepared. Versions before PostgreSQL 18.7, 17.12...