Vulnerability Description
Heap buffer overflow in PostgreSQL pg_trgm allows a database user to achieve unknown impacts via a crafted input string. The attacker has limited control over the byte patterns to be written, but we have not ruled out the viability of attacks that lead to privilege escalation. PostgreSQL 18.1 and 18.0 are affected.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Postgresql | Postgresql | >= 18.0, < 18.2 |
Related Weaknesses (CWE)
References
- https://www.postgresql.org/support/security/CVE-2026-2007/Vendor Advisory
FAQ
What is CVE-2026-2007?
CVE-2026-2007 is a vulnerability with a CVSS score of 8.2 (HIGH). Heap buffer overflow in PostgreSQL pg_trgm allows a database user to achieve unknown impacts via a crafted input string. The attacker has limited control over the byte patterns to be written, but we ...
How severe is CVE-2026-2007?
CVE-2026-2007 has been rated HIGH with a CVSS base score of 8.2/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-2007?
Check the references section above for vendor advisories and patch information. Affected products include: Postgresql Postgresql.