PostgreSQL vulnerabilities

CVEs per yearBy the year they were published

1. 20173
2. 20195
3. 202612

Newest CVEs

• CVE-2026-120067

  psqlODBC stack buffer overflow copying ctid and oid values for updatable cursors

  PostgreSQL · psqlODBC

  Medium5.9
• CVE-2026-120066

  psqlODBC log files are created with default permissions at a predictable path and follow symbolic links

  PostgreSQL · psqlODBC

  Medium5.3
• CVE-2026-120065

  psqlODBC does not escape a server-supplied column name in its updatable-cursor queries

  PostgreSQL · psqlODBC

  High7.1
• CVE-2026-120064

  psqlODBC does not validate column numbers and row indexes in binding and descriptor functions

  PostgreSQL · psqlODBC

  High7.5
• CVE-2026-120063

  psqlODBC stack buffer overflow when quoting long schema and table names

  PostgreSQL · psqlODBC

  Medium5.9
• CVE-2026-120062

  psqlODBC SQL injection through SQLSpecialColumns table and schema names

  PostgreSQL · psqlODBC

  High7.5
• CVE-2026-120061

  psqlODBC ODBC escape parser stack buffer overflow

  PostgreSQL · psqlODBC

  High7.5
• CVE-2026-120060

  psqlODBC does not validate server-supplied counts and lengths

  PostgreSQL · psqlODBC

  Medium5.9
• CVE-2026-120059

  psqlODBC uses a server-supplied column name as a format string

  PostgreSQL · psqlODBC

  Medium6.8
• CVE-2026-120058

  psqlODBC row cache overflow when a later FETCH changes the column count

  PostgreSQL · psqlODBC

  High7.5