CVE-2026-14669 in PostgreSQLinformación

Resumen

por MITRE • 2026-08-13

Heap buffer overflow in PostgreSQL to_char(timestamptz) allows the party choosing the timezone to execute arbitrary code as the operating system user running the database, via a long POSIX timezone abbreviation. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsable

PostgreSQL

Reservar

2026-07-03

Divulgación

2026-08-13

Moderación

aceptado

Artículo

VDB-389416

CPE

listo

EPSS

0.00000

KEV

no

Actividades

muy bajo

Sector

Education, Industry, ...

Fuentes

MITREhttps://www.cve.org/CVERecord?id=CVE-2026-14669
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-14669
CVE Detailshttps://www.cvedetails.com/cve/CVE-2026-14669/

◂ AnteriorVisión De ConjuntoPróximo ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!