https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-06T16:31:20.577314+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2022-1552 CVE-2022-1552 2026-10-06T16:31:20.580789+00:00

Affected: postgresql

A flaw was found in PostgreSQL. There is an issue with incomplete efforts to operate safely when a privileged user is maintaining another user's objects. The Autovacuum, REINDEX, CREATE INDEX, REFRESH MATERIALIZED VIEW, CLUSTER, and pg_amcheck commands activated relevant protections too late or not at all during the process. This flaw allows an attacker with permission to create non-temporary objects in at least one schema to execute arbitrary SQL functions under a superuser identity.

 https://vulnerability.circl.lu/vuln/usn-5440-1 USN-5440-1 — postgresql-10, postgresql-12, postgresql-13, postgresql-14 vulnerability 2026-10-06T16:31:20.580916+00:00

Affected: Ubuntu:18.04:LTS: postgresql-10, Ubuntu:20.04:LTS: postgresql-12, Ubuntu:22.04:LTS: postgresql-14

Alexander Lakhin discovered that PostgreSQL incorrectly handled the security restricted operation sandbox when a privileged user is maintaining another user's objects. An attacker having permission to create non-temp objects can use this issue to execute arbitrary commands as the superuser.