PostgreSQL

Products

Exploited and recent CVEs

• CVE-2026-120067 Medium 5.9 psqlODBC stack buffer overflow copying ctid and oid values for updatable cursors 0.3%
• CVE-2026-120066 Medium 5.3 psqlODBC log files are created with default permissions at a predictable path and follow symbolic links 0.1%
• CVE-2026-120065 High 7.1 psqlODBC does not escape a server-supplied column name in its updatable-cursor queries 0.3%
• CVE-2026-120064 High 7.5 psqlODBC does not validate column numbers and row indexes in binding and descriptor functions 0.3%
• CVE-2026-120063 Medium 5.9 psqlODBC stack buffer overflow when quoting long schema and table names 0.3%
• CVE-2026-120062 High 7.5 psqlODBC SQL injection through SQLSpecialColumns table and schema names 0.4%
• CVE-2026-120061 High 7.5 psqlODBC ODBC escape parser stack buffer overflow 0.3%
• CVE-2026-120060 Medium 5.9 psqlODBC does not validate server-supplied counts and lengths 0.2%
• CVE-2026-120059 Medium 6.8 psqlODBC uses a server-supplied column name as a format string 0.3%
• CVE-2026-120058 High 7.5 psqlODBC row cache overflow when a later FETCH changes the column count 0.3%
• CVE-2026-120057 High 7.5 psqlODBC large-object read overflows the application buffer 0.2%
• CVE-2026-109448 Medium 5.9 psqlODBC SQLBindParameter heap memory corruption when binding more than 32767 parameters 0.2%