onyx

onyx --cves cve-2021-32027

CVE-2021-32027

score
<0.1
cvss
8.8
epss
2.0%
published
2021-06-01
kev added
—
first seen

PostgreSQL versions before 13.3, 12.7, 11.12, 10.17, and 9.6.22 contain a buffer overflow caused by missing bounds checks while modifying SQL array values, letting authenticated users write arbitrary bytes to server memory, exploit requires authenticated database user.

Timeline

How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.

events2021-06-01 — PublishedP2026-10-21 — Tracked by OnyxTscore2026-10-21: score <0.1<0.1epss2026-09-22: epss 2.0%2026-09-23: epss 2.0%2026-09-24: epss 2.0%2026-09-25: epss 2.0%2026-09-26: epss 2.0%2026-09-27: epss 2.0%2026-09-28: epss 2.0%2026-09-29: epss 2.0%2026-09-30: epss 2.0%2026-10-01: epss 2.0%2026-10-02: epss 2.0%2026-10-03: epss 2.0%2026-10-04: epss 2.0%2026-10-05: epss 2.0%2026-10-06: epss 2.0%2026-10-07: epss 2.0%2026-10-08: epss 2.0%2026-10-09: epss 2.0%2026-10-10: epss 2.0%2026-10-11: epss 2.0%2026-10-12: epss 2.0%2026-10-13: epss 2.0%2026-10-14: epss 2.0%2026-10-15: epss 2.0%2026-10-16: epss 2.0%2026-10-18: epss 2.0%2026-10-19: epss 2.0%2026-10-20: epss 2.0%2026-10-21: epss 2.0%2.0%mentions/day0no mentions in 30 days2026-09-22today
  1. Published
  2. Tracked by Onyx

Weaknesses

CWE-190

References 4