CVE WATCH / VULNERABILITY DETAIL
CVE-2026-120142
HIGHCVSS 8.8NVD feed
Published 12 November 2026 · tracked since 13 November 2026
Description
Type confusion in PostgreSQL anonymous RECORD types allows an object creator to execute arbitrary code as the operating system user running the database, via row types having dropped attributes in the same positions but with different widths or alignments. Within major versions 17-18, minor version
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-120151 HIGH 8.8
- CVE-2026-120150 HIGH 8.8
- CVE-2026-120149 HIGH 8.8
- CVE-2026-120147 HIGH 8.8
- CVE-2026-120145 HIGH 8.8
- CVE-2026-120144 HIGH 8.8
- CVE-2026-120143 HIGH 8.8
- CVE-2026-120141 HIGH 8.8
- CVE-2026-120139 HIGH 8.8
- CVE-2026-116336 HIGH 8.8