PostgreSQL (< 18.7)

PostgreSQL versions prior to 18.7, 17.12, 16.16, 15.20, and 14.25 contain an uncontrolled search path vulnerability that allows attackers with CREATE privileges to achieve privilege escalation via malicious schema manipulation.

A type confusion vulnerability in PostgreSQL version 18 related to incomplete type-cache invalidation allows an object creator to execute arbitrary code as the operating system user running the database.

PostgreSQL versions 18.x before 18.7 contain a type confusion vulnerability in the statistics import mechanism that allows an authenticated table maintainer to execute arbitrary code with the privileges of the database service.

An unauthenticated remote attacker can trigger a server restart in PostgreSQL versions 18 through 18.6 by sending a specially crafted cancel request during the authentication process.