PT-2026-145822

CVE-2026-116332

·

Published

2026-11-12

·

Updated

2026-11-12

Description by

CVSS 3.1
8.8
High
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Use after free in PostgreSQL portal setup allows an object creator to execute arbitrary code as the operating system user running the database, via running user-defined code during planning or executor startup that closes the portal currently being prepared. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-416: Use After Free
Related identifiers
CVE-2026-116332
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com