在PostgreSQL的多个零日漏洞中，最为紧迫的是一个被追踪为CVE-2026-2005的基于堆的缓冲区溢出问题。该漏洞存在于pgcrypto扩展中。研究人员指出，通过使用精心构造的输入，攻击者可以触发大小不匹配，导致在堆上进行越界写入。

Critical flaws affecting core components and extensions in PostgreSQL and MariaDB could allow remote code execution. The bugs ...

AI-assisted security analysis uncovered critical PostgreSQL and MariaDB vulnerabilities that remained hidden for more than two decades, highlighting the growing importance of continuously auditing ...