CVE-2024-10976

score

<0.1

cvss

4.2

epss

0.8%

published

2024-11-14

kev added

—

first seen

2026-10-21

PostgreSQL versions before 17.1, 16.5, 15.9, 14.14, 13.17, and 12.21 contain incomplete tracking of row security policies caused by missed cases involving subqueries, views, or functions referencing tables with row security, letting attackers exploit query plan reuse to view or modify unintended rows, exploit requires tailored attack based on application's query patterns.