Security Advisory

CVE-2026-14676

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-13 13:00:07

Last updated 2026-08-29 23:07:19

Assigner PostgreSQL

CVSS score 8.8

State PUBLISHED

Description

Heap buffer overflow in PostgreSQL pg_stat_statements allows the query author to execute arbitrary code as the operating system user running the database, via crafted queries containing array constants. Within major version 18, minor versions before PostgreSQL 18.6 are affected. Versions before PostgreSQL 18 are unaffected.

← Browse all CVEs View on cve.org ↗