PostgreSQL · versions
PostgreSQL 16 security vulnerabilities
PostgreSQL 16 is a PostgreSQL major series. Minor releases carry security fixes — pin and upgrade within the series.
Evidence status
0 version-attributed CVE rows in this catalog for PostgreSQL 16. That means incomplete or pending attribution for these version tokens — not that the release is free of vulnerabilities. Zero matches is never proof PostgreSQL 16 is secure. Coverage can lag vendor disclosure. Always verify the original advisory.
Version overview
- PostgreSQL 16 vulnerabilities are tracked for the PostgreSQL major line and related extensions when named in advisories.
- Minor-version upgrades inside the series are the usual remediation path for community builds.
Security advisories for PostgreSQL 16
Confirmed catalog rows attributed to this version series via affected ranges, advisory text, or CVE-linked fix commits on 16.0.
No version-attributed CVE rows yet. That is an evidence gap in this catalog, not a security certification. Review the broader PostgreSQL list below and run the revision / version checker.
Patch information
Public, disclosed Community fix commits attributed to 16.0. Proprietary Enterprise diffs are never shown.
No public disclosed fix commits for 16.0 are listed yet. Use the CVE version checker when you have a concrete SHA or package version.
Disclosed public references on file for 16.0: 0.
Security changes & hardening
Follow the PostgreSQL security updates timeline for confirmed fixes, dependency remediations, and hardening events. Ordinary bugfixes are excluded from that timeline.
How to identify your installed revision
- `SELECT version();` in psql.
- Package managers: `postgres -V` or distribution package version.
- Confirm the minor release against the vendor fixed version, not only the major (14/15/16/17).
Security checker
Check a CVE against the exact version string you run — ranges are evaluated from catalog metadata.
Monitoring
Watch the PostgreSQL stack for newly ingested advisories. Alerts follow your account package — they do not invent exploitability for PostgreSQL 16.
Broader PostgreSQL catalog
40 recordsNo advisory in this catalog names PostgreSQL 16 yet. These are PostgreSQL core records that do name a series, so the gap is visible instead of filled with unrelated products.
- High8.6Payload: SQL injection in SQLite/PostgresCheck if you run itEPSS 0.29%Oct 6, 2026
- Critical9.8Marten is a .NET Transactional Document DB and Event Store on PostgreSQL.Check if you run itEPSS 0.54%May 28, 2026
- Critical9.4CloudNativePG is a platform designed to manage PostgreSQL databases within Kubernetes environments.Check if you run itEPSS 0.52%May 28, 2026
- Medium5.3Mathesar is a web application that makes working with PostgreSQL databases both simple and powerful.Check if you run itEPSS 0.38%May 15, 2026
- Medium5.3Mathesar is a web application that makes working with PostgreSQL databases both simple and powerful.Check if you run itEPSS 0.38%May 15, 2026
- High8.8SQL injection in PostgreSQL logical replication ALTER SUBSCRIPTION ...Check if you run itEPSS 0.18%May 14, 2026
- High8.8Stack buffer overflow in PostgreSQL module "refint" allows an unprivileged database user to execute arbitrary code as the operating system user running the database.Check if you run itEPSS 0.37%May 14, 2026
- Medium4.3Buffer over-read in PostgreSQL function pg_restore_attribute_stats() accepts array values of unmatched length, which causes query planning to read past end of one array.Check if you run itEPSS 0.21%May 14, 2026
- High7.5Uncontrolled recursion in PostgreSQL SSL and GSS negotiation allows an attacker able to connect to a PostgreSQL AF_UNIX socket to achieve sustained denial of service.Check if you run itEPSS 0.60%May 14, 2026
- Medium6.5Covert timing channel in comparison of MD5-hashed password in PostgreSQL authentication allows an attacker to recover user credentials sufficient to authenticate.Check if you run itEPSS 0.56%May 14, 2026
- High8.8Use of inherently dangerous function PQfn(..., result_is_int=0, ...) in PostgreSQL libpq lo_export(), lo_read(), lo_lseek64(), and lo_tell64() functions allows the ser…Check if you run itEPSS 0.45%May 14, 2026
- High7.2SQL injection in PostgreSQL pg_createsubscriber allows an attacker with pg_create_subscription rights to execute arbitrary SQL as a superuser.Check if you run itEPSS 0.29%May 14, 2026