https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T00:50:44.146896+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2021-32029 CVE-2021-32029 2026-10-15T00:50:44.149017+00:00

Affected: postgresql

A flaw was found in postgresql. Using an UPDATE ... RETURNING command on a purpose-crafted table, an authenticated database user could read arbitrary bytes of server memory. The highest threat from this vulnerability is to data confidentiality.

 https://cve.radiocsirt.org/vuln/usn-4972-1 USN-4972-1 — postgresql-10, postgresql-12, postgresql-13 vulnerabilities 2026-10-15T00:50:44.149066+00:00

Affected: Ubuntu:18.04:LTS: postgresql-10, Ubuntu:20.04:LTS: postgresql-12

Tom Lane discovered that PostgreSQL incorrect handled certain array subscripting calculations. An authenticated attacker could possibly use this issue to overwrite server memory and escalate privileges. (CVE-2021-32027)

Andres Freund discovered that PostgreSQL incorrect handled certain INSERT ... ON CONFLICT ... DO UPDATE commands. A remote attacker could possibly use this issue to read server memory and obtain sensitive information. (CVE-2021-32028)

Tom Lane discovered that PostgreSQL incorrect handled certain UPDATE ... RETURNING commands. A remote attacker could possibly use this issue to read server memory and obtain sensitive information. This issue only affected Ubuntu 20.04 LTS, Ubuntu 20.10, and Ubuntu 21.04. (CVE-2021-32029)