CVE record · 1 source
CVE-2026-120148
CVSS 8.1Type confusion in PostgreSQL extended statistics allows an object creator to execute arbitrary code as the operating system user running the…
- Product
- PostgreSQL
- CVSS v3.1
- 8.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
- Weakness
- CWE-843
- Exposure class
- Database
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Type confusion in PostgreSQL extended statistics allows an object creator to execute arbitrary code as the operating system user running the…
Type confusion in PostgreSQL extended statistics allows an object creator to execute arbitrary code as the operating system user running the database, via a statistics expression of an anonymous RECORD type whose backend-local…