onyx

onyx --cves cve-2022-2625

CVE-2022-2625

score
<0.1
cvss
8.0
epss
2.0%
published
2022-08-18
kev added
—
first seen

PostgreSQL contains a privilege escalation vulnerability caused by improper handling of extension creation and object replacement, letting attackers run arbitrary code as the victim role, exploit requires specific schema and extension manipulation.

Timeline

How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.

events2022-08-18 — PublishedP2026-10-21 — Tracked by OnyxTscore2026-10-21: score <0.1<0.1epss2026-09-22: epss 1.9%2026-09-23: epss 1.9%2026-09-24: epss 1.9%2026-09-25: epss 1.9%2026-09-26: epss 1.9%2026-09-27: epss 1.9%2026-09-28: epss 1.9%2026-09-29: epss 1.9%2026-09-30: epss 1.9%2026-10-01: epss 1.9%2026-10-02: epss 1.9%2026-10-03: epss 1.9%2026-10-04: epss 1.9%2026-10-05: epss 1.9%2026-10-06: epss 1.9%2026-10-07: epss 1.9%2026-10-08: epss 1.9%2026-10-09: epss 1.9%2026-10-10: epss 1.9%2026-10-11: epss 1.9%2026-10-12: epss 2.0%2026-10-13: epss 2.0%2026-10-14: epss 2.0%2026-10-15: epss 2.0%2026-10-16: epss 2.0%2026-10-18: epss 2.0%2026-10-19: epss 2.0%2026-10-20: epss 2.0%2026-10-21: epss 2.0%2.0%mentions/day0no mentions in 30 days2026-09-22today
  1. Published
  2. Tracked by Onyx

Weaknesses

CWE-915 CWE-1321

References 3