Month: May 2026

Information published. Continue reading CVE-2026-6477 PostgreSQL libpq lo_* functions let server superuser overwrite client stack memory→

Information published. Continue reading CVE-2026-6637 PostgreSQL refint allows stack buffer overflow and SQL injection→

Information published. Continue reading CVE-2026-6472 PostgreSQL CREATE TYPE does not check multirange schema CREATE privilege→

Information published. Continue reading CVE-2026-6474 PostgreSQL timeofday() can disclose portions of server memory→

Information published. Continue reading CVE-2026-6475 PostgreSQL pg_basebackup and pg_rewind can overwrite unrelated files of origin superuser choice→

Information published. Continue reading CVE-2026-6638 PostgreSQL REFRESH PUBLICATION allows SQL injection via table name→

Information published. Continue reading CVE-2026-6473 PostgreSQL server undersizes allocations, via integer wraparound→

Information published. Continue reading CVE-2026-6478 PostgreSQL discloses MD5-hashed passwords via covert timing channel→