CVE-2019-10127

score

<0.1

cvss

8.8

epss

0.3%

published

2021-03-19

kev added

—

first seen

2026-10-21

PostgreSQL versions prior to 11.3 on Windows, supplied by BigSQL, contain a security misconfiguration caused by not locking down directory ACLs, letting unprivileged attackers execute code, read, or delete data directory files, exploit requires attacker to have unprivileged Windows and PostgreSQL accounts.