Input Validation and Logic

Every one of the 5 is a mark on the map. Named now: 1 to 5, most at risk first.

1. PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary codeCVE-2026-2004Postgresql · CVSS 8.8 · 1.3% likely

   CWE-1287

2. schema_element defeats protective search_path changes; It was found that certain database calls in PostgreSQL could permit an authed attacker with elevated database-level privileg…CVE-2023-2454Postgresql · CVSS 7.2 · 1.2% likely

   CWE-20

3. Row security policies disregard user ID changes after inlining; PostgreSQL could permit incorrect policies to be applied in certain cases where role-specific policies are used and…CVE-2023-2455Postgresql · CVSS 5.4 · 0.7% likely

   CWE-20

4. PostgreSQL ALTER TABLE ALTER TYPE resets extended statistics ownershipCVE-2026-6469Postgresql · CVSS 3.8 · 0.3% likely

   CWE-708

5. PostgreSQL oidvector discloses a few bytes of memoryCVE-2026-2003Postgresql · CVSS 4.3 · 0.3% likely

   CWE-1287

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.