Количество 8
Количество 8
CVE-2026-16239
Type confusion in PostgreSQL "portal"/cursor lifecycle allows a user to execute arbitrary code as the operating system user running the database, via re-creation of a cursor or other portal with different types. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.
CVE-2026-16239
Type confusion in PostgreSQL "portal"/cursor lifecycle allows a user to execute arbitrary code as the operating system user running the database, via re-creation of a cursor or other portal with different types. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.
CVE-2026-16239
PostgreSQL type confusion in cursor CLOSE + DECLARE executes arbitrary code
CVE-2026-16239
Type confusion in PostgreSQL "portal"/cursor lifecycle allows a user t ...
GHSA-m6g7-vvh9-445r
Type confusion in PostgreSQL "portal"/cursor lifecycle allows a user to execute arbitrary code as the operating system user running the database, via re-creation of a cursor or other portal with different types. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.
BDU:2026-11969
Уязвимость системы управления базами данных PostgreSQL, связанная с ошибками смешения типов данных, позволяющая нарушителю выполнить произвольный код
SUSE-SU-2026:3793-1
Security update for postgresql14
SUSE-SU-2026:3794-1
Security update for postgresql16
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-16239 Type confusion in PostgreSQL "portal"/cursor lifecycle allows a user to execute arbitrary code as the operating system user running the database, via re-creation of a cursor or other portal with different types. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected. | CVSS3: 8.8 | 1% Низкий | около 1 месяца назад |
 | CVE-2026-16239 Type confusion in PostgreSQL "portal"/cursor lifecycle allows a user to execute arbitrary code as the operating system user running the database, via re-creation of a cursor or other portal with different types. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected. | CVSS3: 8.8 | 1% Низкий | около 1 месяца назад |
 | CVE-2026-16239 PostgreSQL type confusion in cursor CLOSE + DECLARE executes arbitrary code | CVSS3: 8.8 | 1% Низкий | 23 дня назад |
| CVE-2026-16239 Type confusion in PostgreSQL "portal"/cursor lifecycle allows a user t ... | CVSS3: 8.8 | 1% Низкий | около 1 месяца назад |
| GHSA-m6g7-vvh9-445r Type confusion in PostgreSQL "portal"/cursor lifecycle allows a user to execute arbitrary code as the operating system user running the database, via re-creation of a cursor or other portal with different types. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected. | CVSS3: 8.8 | 1% Низкий | около 1 месяца назад |
 | BDU:2026-11969 Уязвимость системы управления базами данных PostgreSQL, связанная с ошибками смешения типов данных, позволяющая нарушителю выполнить произвольный код | CVSS3: 8.8 | 1% Низкий | около 1 месяца назад |
 | SUSE-SU-2026:3793-1 Security update for postgresql14 | 21 день назад | ||
| SUSE-SU-2026:3794-1 Security update for postgresql16 | 21 день назад |
Уязвимостей на страницу