CVE-2026-120143

HighCVSS 8.8/10Last modified Nov 13, 2026

Description

Use after free in PostgreSQL trigger functions allows an object creator to execute arbitrary code as the operating system user running the database, via a cursor over a transition table. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Nov 12, 2026
Last modified
Nov 13, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-1201448.8Type confusion from incomplete PostgreSQL type-cache invalidation allows an object creator to execute arbitrary code as the operating systemCVE-2026-1201458.8Missing authorization in PostgreSQL logical replication allows a compromised publisher to execute arbitrary code as the operating system useCVE-2026-1201464.3Missing authorization in PostgreSQL REASSIGN OWNED allows a role granted INHERIT but not SET to transfer objects to the granted role. It alCVE-2026-1201478.8Use after free in the PostgreSQL dblink extension allows an object creator to execute arbitrary code as the operating system user running thCVE-2026-1201488.1Type confusion in PostgreSQL extended statistics allows an object creator to execute arbitrary code as the operating system user running theCVE-2026-1201498.8Heap-based buffer overflow in PostgreSQL foreign batch inserts allows a foreign server to execute arbitrary code, via reporting that it inseCVE-2026-120155.3Use after free in Autofill in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to obCVE-2026-1201508.8Use after free in PostgreSQL expanded-record domain checks allows an object creator to execute arbitrary code as the operating system user rCVE-2026-1201518.8Type confusion in PostgreSQL plpgsql record-field assignment allows an object creator to execute arbitrary code as the operating system userCVE-2026-1201524.3Use after free in PostgreSQL pg_show_all_settings() allows a database user to retrieve memory contents, via loading a module while the functCVE-2026-1201537.2SQL injection in PostgreSQL extension-script substitutions allows an attacker with database-level CREATE privilege to execute arbitrary codeCVE-2026-1201544.3Improper protection in PostgreSQL INSERT ... ON CONFLICT allows an attacker having INSERT, UPDATE, and applicable SELECT privileges on the t
CVE-2026-120143: High severity, CVSS 8.8 | Vulnix