Postgresql Psqlodbc vulnerabilities

• postgresql psqlodbc psqlODBC stack buffer overflow copying ctid and oid values for updatable cursors CVE-2026-120067 Fix available 5.9 MediumNovember 2, 2026
• postgresql psqlodbc psqlODBC log files are created with default permissions at a predictable path and follow symbolic links CVE-2026-120066 Fix available 5.3 MediumNovember 2, 2026
• postgresql psqlodbc psqlODBC does not escape a server-supplied column name in its updatable-cursor queries CVE-2026-120065 Fix available 7.1 HighNovember 2, 2026
• postgresql psqlodbc psqlODBC does not validate column numbers and row indexes in binding and descriptor functions CVE-2026-120064 Fix available 7.5 HighNovember 2, 2026
• postgresql psqlodbc psqlODBC stack buffer overflow when quoting long schema and table names CVE-2026-120063 Fix available 5.9 MediumNovember 2, 2026
• postgresql psqlodbc psqlODBC SQL injection through SQLSpecialColumns table and schema names CVE-2026-120062 Fix available 7.5 HighNovember 2, 2026
• postgresql psqlodbc psqlODBC ODBC escape parser stack buffer overflow CVE-2026-120061 Fix available 7.5 HighNovember 2, 2026
• postgresql psqlodbc psqlODBC does not validate server-supplied counts and lengths CVE-2026-120060 Fix available 5.9 MediumNovember 2, 2026
• postgresql psqlodbc psqlODBC uses a server-supplied column name as a format string CVE-2026-120059 Fix available 6.8 MediumNovember 2, 2026
• postgresql psqlodbc psqlODBC row cache overflow when a later FETCH changes the column count CVE-2026-120058 Fix available 7.5 HighNovember 2, 2026
• postgresql psqlodbc psqlODBC large-object read overflows the application buffer CVE-2026-120057 Fix available 7.5 HighNovember 2, 2026
• postgresql psqlodbc psqlODBC SQLBindParameter heap memory corruption when binding more than 32767 parameters CVE-2026-109448 Fix available 5.9 MediumOctober 12, 2026