Product by PostgreSQL Global Development Group
PostgreSQL psqlODBC
12 known vulnerabilities in PostgreSQL psqlODBC (PostgreSQL Global Development Group), 0 of them actively exploited (CISA KEV).
Key figures
12
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-120062 | psqlODBC SQL injection through SQLSpecialColumns table and schema names | 7.5 | |
| High | CVE-2026-120064 | psqlODBC does not validate column numbers and row indexes in binding and descriptor functions | 7.5 | |
| High | CVE-2026-120061 | psqlODBC ODBC escape parser stack buffer overflow | 7.5 | |
| High | CVE-2026-120057 | psqlODBC large-object read overflows the application buffer | 7.5 | |
| High | CVE-2026-120065 | psqlODBC does not escape a server-supplied column name in its updatable-cursor queries | 7.1 | |
| High | CVE-2026-120058 | psqlODBC row cache overflow when a later FETCH changes the column count | 7.5 | |
| Medium | CVE-2026-120059 | psqlODBC uses a server-supplied column name as a format string | 6.8 | |
| Medium | CVE-2026-120067 | psqlODBC stack buffer overflow copying ctid and oid values for updatable cursors | 5.9 | |
| Medium | CVE-2026-120063 | psqlODBC stack buffer overflow when quoting long schema and table names | 5.9 | |
| Medium | CVE-2026-109448 | psqlODBC SQLBindParameter heap memory corruption when binding more than 32767 parameters | 5.9 | |
| Medium | CVE-2026-120060 | psqlODBC does not validate server-supplied counts and lengths | 5.9 | |
| Medium | CVE-2026-120066 | PostgreSQL psqlODBC: Link Following | 5.3 |