onyx --cves cve-2021-32028

CVE-2021-32028

score: <0.1
cvss: 6.5
epss: 1.6%
published: 2021-10-11
kev added: —
first seen: 2026-10-21

PostgreSQL contains a flaw in the INSERT ... ON CONFLICT ... DO UPDATE command on crafted tables, letting authenticated users read arbitrary server memory bytes, exploit requires authenticated database access.

Timeline

How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.

2021-10-11 Published
2026-10-21 Tracked by Onyx

Weaknesses

CWE-200 NVD-CWE-noinfo

References 4

https://security.gentoo.org/glsa/202211-04
https://security.netapp.com/advisory/ntap-20211112-0003/
https://www.postgresql.org/support/security/CVE-2021-32028
https://bugzilla.redhat.com/show_bug.cgi?id=1956877