CVE-2024-0985

score

<0.1

cvss

8.0

epss

1.8%

published

2024-02-08

kev added

—

first seen

2026-10-21

PostgreSQL < 16.2, 15.6, 14.11, 13.14, 12.18 contains a privilege drop issue in REFRESH MATERIALIZED VIEW CONCURRENTLY caused by late privilege drop, letting attackers execute arbitrary SQL functions as the command issuer, exploit requires the victim to run the command on malicious view.