https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-02T18:07:05.231319+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2021-32027 CVE-2021-32027 2026-10-02T18:07:06.835805+00:00

Affected: postgresql

A flaw was found in postgresql in versions before 13.3, before 12.7, before 11.12, before 10.17 and before 9.6.22. While modifying certain SQL array values, missing bounds checks let authenticated database users write arbitrary bytes to a wide area of server memory. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

 https://vulnerability.circl.lu/vuln/usn-4972-1 USN-4972-1 — postgresql-10, postgresql-12, postgresql-13 vulnerabilities 2026-10-02T18:07:06.835927+00:00

Affected: Ubuntu:18.04:LTS: postgresql-10, Ubuntu:20.04:LTS: postgresql-12

Tom Lane discovered that PostgreSQL incorrect handled certain array subscripting calculations. An authenticated attacker could possibly use this issue to overwrite server memory and escalate privileges. (CVE-2021-32027)

Andres Freund discovered that PostgreSQL incorrect handled certain INSERT ... ON CONFLICT ... DO UPDATE commands. A remote attacker could possibly use this issue to read server memory and obtain sensitive information. (CVE-2021-32028)

Tom Lane discovered that PostgreSQL incorrect handled certain UPDATE ... RETURNING commands. A remote attacker could possibly use this issue to read server memory and obtain sensitive information. This issue only affected Ubuntu 20.04 LTS, Ubuntu 20.10, and Ubuntu 21.04. (CVE-2021-32029)