CVE detail
CVE-2026-6473
Integer wraparound in multiple PostgreSQL server features allows an unprivileged database user to cause the server to undersize an allocation and write out-of-bounds. This may execute arbitrary code as the operating system user running the database. In applications that pass gigabyte-scale user inputs to the relevant database functions, the application input provider may achieve a segmentation fault. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 30.0 · diversity 18.0 · KEV 0.0 · OTX 0.0 · PoC 0.0
Why it matters now
Mention timeline
- Total mentions
- 0
- within the 30d window
- Peak daily
- 0
- highest bucket
Evidence
Source links by recency
38 source links · newest first
Information published.
vendormsrc.microsoft.comMay 16, 2026, 8:04 AM- https://access.redhat.com/errata/RHSA-2026:49521access.redhat.com
No excerpt available.
Exploitaccess.redhat.comMay 14, 2026, 2:16 PM - https://access.redhat.com/errata/RHSA-2026:44568access.redhat.com
No excerpt available.
Exploitaccess.redhat.comMay 14, 2026, 2:16 PM - https://access.redhat.com/errata/RHSA-2026:44481access.redhat.com
No excerpt available.
Exploitaccess.redhat.comMay 14, 2026, 2:16 PM - https://access.redhat.com/errata/RHSA-2026:44420access.redhat.com
No excerpt available.
Exploitaccess.redhat.comMay 14, 2026, 2:16 PM - https://access.redhat.com/errata/RHSA-2026:42555access.redhat.com
No excerpt available.
Exploitaccess.redhat.comMay 14, 2026, 2:16 PM - https://access.redhat.com/errata/RHSA-2026:28208access.redhat.com
No excerpt available.
Exploitaccess.redhat.comMay 14, 2026, 2:16 PM - https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6473.jsonsecurity.access.redhat.com
No excerpt available.
Vendor Advisorysecurity.access.redhat.comMay 14, 2026, 2:16 PM - https://bugzilla.redhat.com/show_bug.cgi?id=2477448bugzilla.redhat.com
No excerpt available.
Exploitbugzilla.redhat.comMay 14, 2026, 2:16 PM - https://access.redhat.com/security/cve/CVE-2026-6473access.redhat.com
No excerpt available.
Exploitaccess.redhat.comMay 14, 2026, 2:16 PM - https://access.redhat.com/errata/RHSA-2026:35880access.redhat.com
No excerpt available.
Exploitaccess.redhat.comMay 14, 2026, 2:16 PM - https://access.redhat.com/errata/RHSA-2026:34363access.redhat.com
No excerpt available.
Exploitaccess.redhat.comMay 14, 2026, 2:16 PM - https://access.redhat.com/errata/RHSA-2026:34362access.redhat.com
No excerpt available.
Exploitaccess.redhat.comMay 14, 2026, 2:16 PM - https://access.redhat.com/errata/RHSA-2026:34043access.redhat.com
No excerpt available.
Exploitaccess.redhat.comMay 14, 2026, 2:16 PM - https://access.redhat.com/errata/RHSA-2026:33497access.redhat.com
No excerpt available.
Exploitaccess.redhat.comMay 14, 2026, 2:16 PM - https://access.redhat.com/errata/RHSA-2026:33441access.redhat.com
No excerpt available.
Exploitaccess.redhat.comMay 14, 2026, 2:16 PM - https://access.redhat.com/errata/RHSA-2026:32994access.redhat.com
No excerpt available.
Exploitaccess.redhat.comMay 14, 2026, 2:16 PM - https://access.redhat.com/errata/RHSA-2026:32983access.redhat.com
No excerpt available.
Exploitaccess.redhat.comMay 14, 2026, 2:16 PM - https://access.redhat.com/errata/RHSA-2026:29953access.redhat.com
No excerpt available.
Exploitaccess.redhat.comMay 14, 2026, 2:16 PM - https://access.redhat.com/errata/RHSA-2026:29904access.redhat.com
No excerpt available.
Exploitaccess.redhat.comMay 14, 2026, 2:16 PM - https://access.redhat.com/errata/RHSA-2026:29815access.redhat.com
No excerpt available.
Exploitaccess.redhat.comMay 14, 2026, 2:16 PM - https://access.redhat.com/errata/RHSA-2026:29212access.redhat.com
No excerpt available.
Exploitaccess.redhat.comMay 14, 2026, 2:16 PM - https://access.redhat.com/errata/RHSA-2026:28999access.redhat.com
No excerpt available.
Exploitaccess.redhat.comMay 14, 2026, 2:16 PM - https://access.redhat.com/errata/RHSA-2026:28143access.redhat.com
No excerpt available.
Exploitaccess.redhat.comMay 14, 2026, 2:16 PM - https://access.redhat.com/errata/RHSA-2026:28037access.redhat.com
No excerpt available.
Exploitaccess.redhat.comMay 14, 2026, 2:16 PM - https://access.redhat.com/errata/RHSA-2026:27743access.redhat.com
No excerpt available.
Exploitaccess.redhat.comMay 14, 2026, 2:16 PM - https://access.redhat.com/errata/RHSA-2026:27742access.redhat.com
No excerpt available.
Exploitaccess.redhat.comMay 14, 2026, 2:16 PM - https://access.redhat.com/errata/RHSA-2026:27741access.redhat.com
No excerpt available.
Exploitaccess.redhat.comMay 14, 2026, 2:16 PM - https://access.redhat.com/errata/RHSA-2026:27738access.redhat.com
No excerpt available.
Exploitaccess.redhat.comMay 14, 2026, 2:16 PM - https://access.redhat.com/errata/RHSA-2026:27718access.redhat.com
No excerpt available.
Exploitaccess.redhat.comMay 14, 2026, 2:16 PM - https://access.redhat.com/errata/RHSA-2026:26561access.redhat.com
No excerpt available.
Exploitaccess.redhat.comMay 14, 2026, 2:16 PM - https://access.redhat.com/errata/RHSA-2026:26525access.redhat.com
No excerpt available.
Exploitaccess.redhat.comMay 14, 2026, 2:16 PM - https://access.redhat.com/errata/RHSA-2026:26524access.redhat.com
No excerpt available.
Exploitaccess.redhat.comMay 14, 2026, 2:16 PM - https://access.redhat.com/errata/RHSA-2026:26204access.redhat.com
No excerpt available.
Exploitaccess.redhat.comMay 14, 2026, 2:16 PM - https://access.redhat.com/errata/RHSA-2026:26203access.redhat.com
No excerpt available.
Exploitaccess.redhat.comMay 14, 2026, 2:16 PM - https://access.redhat.com/errata/RHSA-2026:26181access.redhat.com
No excerpt available.
Exploitaccess.redhat.comMay 14, 2026, 2:16 PM - https://access.redhat.com/errata/RHSA-2026:22878access.redhat.com
No excerpt available.
Exploitaccess.redhat.comMay 14, 2026, 2:16 PM - https://www.postgresql.org/support/security/CVE-2026-6473/www.postgresql.org
No excerpt available.
Vendor Advisorywww.postgresql.orgMay 14, 2026, 2:16 PM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
0 repository references · best confidence N/A · max 0 stars
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2023-5869CVSS 8.8 · High
A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL array value modification. This issue e…
- CVE-2021-32027CVSS 8.8 · High
A flaw was found in postgresql in versions before 13.3, before 12.7, before 11.12, before 10.17 and before 9.6.22. While modifying certain SQL array values, missing bounds checks…
- CVE-2026-18671CVSS 6.5 · Medium
IBM i 7.6, 7.5, 7.4, and 7.3 could allow an authenticated attacker to force a NetServer server thread exception, caused by an integer overflow during bounds checking in request pr…
- CVE-2026-17216CVSS 5.3 · Medium
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an integer error when processing DRDA large-object headers.
- CVE-2026-73645CVSS 6.6 · Medium
OpenZeppelin Confidential Contracts is an experimental library for developing applications on the Zama fhEVM. Prior to 0.3.1, the ERC7984 contract tracked confidential total suppl…
- CVE-2026-73564CVSS 8.7 · High
frp is a fast reverse proxy. From 0.53.0 until 0.70.1, frp's optional SSH Tunnel Gateway in pkg/ssh/server.go parses an SSH exec channel request by adding 4 to an attacker-control…