Every CVE Search/ Get API key

CVE-2026-34278

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). ...

4.9 MediumFix available

CVE-2026-34278 is a medium vulnerability (CVSS 4.9) in Oracle Mysql Server, published April 21, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.32%, the 25th percentile. Fixed in mysql 8.0.46-1.el9_8.

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
High
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.32%Up 0.3 points since Apr 22, 2026
90%50%10%1%

What each source reports

CVE List Score used 4.9

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Record
CVE-2026-34278
CVSS 3.1
4.9 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-400
Updated
2026-11-02
EUVDEUVD-2026-24354 4.9

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Record
EUVD-2026-24354
CVSS 3.1
4.9 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-fh86-xhc3-24gr 4.9

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). ...

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Record
GHSA-fh86-xhc3-24gr
CVSS 3.1
4.9 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-400
Updated
2026-11-02
NVD 4.9

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Record
CVE-2026-34278
CVSS 3.1
4.9 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-400
Updated
2026-11-02
OSVBELL-CVE-2026-34278 4.9

CVE-2026-34278 does not affect BellSoft software

Record
BELL-CVE-2026-34278
CVSS 3.1
4.9 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSV 4.9

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Record
CVE-2026-34278
CVSS 3.1
4.9 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 17 moreShow less
OSVOESA-2026-2118 6.5

mysql security update

MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon (mysqld) and many different client programs and libraries. The base package contains the standard MySQL client programs and generic MySQL files. %if

Security Fix(es):

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2026-21998)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.1 Base Score 2.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N).(CVE-2026-22001)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2026-22002)

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2026-22004)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2026-22005)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).(CVE-2026-22009)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Supported versions that are affected are 8.0.0-8.0.45,…

Record
OESA-2026-2118
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2026-2119 6.5

mysql security update

MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon (mysqld) and many different client programs and libraries. The base package contains the standard MySQL client programs and generic MySQL files. %if

Security Fix(es):

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2026-21998)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.1 Base Score 2.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N).(CVE-2026-22001)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2026-22002)

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2026-22004)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2026-22005)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).(CVE-2026-22009)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Supported versions that are affected are 8.0.0-8.0.45,…

Record
OESA-2026-2119
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2026-2120 6.5

mysql security update

MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon (mysqld) and many different client programs and libraries. The base package contains the standard MySQL client programs and generic MySQL files. %if

Security Fix(es):

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2026-21998)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.1 Base Score 2.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N).(CVE-2026-22001)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2026-22002)

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2026-22004)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2026-22005)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).(CVE-2026-22009)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Supported versions that are affected are 8.0.0-8.0.45,…

Record
OESA-2026-2120
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2026-2153 6.5

mysql security update

MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon (mysqld) and many different client programs and libraries. The base package contains the standard MySQL client programs and generic MySQL files. %if

Security Fix(es):

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2026-21998)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.1 Base Score 2.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N).(CVE-2026-22001)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2026-22002)

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2026-22004)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2026-22005)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).(CVE-2026-22009)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Supported versions that are affected are 8.0.0-8.0.45,…

Record
OESA-2026-2153
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2026-2154 6.5

mysql security update

MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon (mysqld) and many different client programs and libraries. The base package contains the standard MySQL client programs and generic MySQL files. %if

Security Fix(es):

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2026-21998)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.1 Base Score 2.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N).(CVE-2026-22001)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2026-22002)

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2026-22004)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).(CVE-2026-22005)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).(CVE-2026-22009)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Supported versions that are affected are 8.0.0-8.0.45,…

Record
OESA-2026-2154
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:23332 6.5

Red Hat Security Advisory: mysql security update

Record
RHSA-2026:23332
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:25919 6.5

Red Hat Security Advisory: mysql:8.0 security update

Record
RHSA-2026:25919
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2026:23332 6.5

Moderate: mysql security update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.

Security Fix(es):

  • mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-22004)

  • mysql: Information Schema unspecified vulnerability (CPU Apr 2026) (CVE-2026-22001)

  • mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) (CVE-2026-34271)

  • mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22009)

  • mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-35237)

  • mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-21998)

  • mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22005)

  • mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-35238)

  • mysql: DML unspecified vulnerability (CPU Apr 2026) (CVE-2026-35239)

  • mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22002)

  • mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-35236)

  • mysql: JSON unspecified vulnerability (CPU Apr 2026) (CVE-2026-34308)

  • mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-34303)

  • mysql: DML unspecified vulnerability (CPU Apr 2026) (CVE-2026-34293)

  • mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-35240)

  • mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-34267)

  • mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22017)

  • mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-34304)

  • mysql: Information Schema unspecified vulnerability (CPU Apr 2026) (CVE-2026-22015)

  • mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) (CVE-2026-34276)

  • mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) (CVE-2026-34270)

  • mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-34278)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:23332
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2026:25919 6.5

Moderate: mysql:8.0 security update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.

Security Fix(es):

  • mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-22004)

  • mysql: Information Schema unspecified vulnerability (CPU Apr 2026) (CVE-2026-22001)

  • mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) (CVE-2026-34271)

  • mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22009)

  • mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-35237)

  • mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-21998)

  • mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22005)

  • mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-35238)

  • mysql: DML unspecified vulnerability (CPU Apr 2026) (CVE-2026-35239)

  • mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22002)

  • mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-35236)

  • mysql: JSON unspecified vulnerability (CPU Apr 2026) (CVE-2026-34308)

  • mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-34303)

  • mysql: DML unspecified vulnerability (CPU Apr 2026) (CVE-2026-34293)

  • mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-35240)

  • mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-34267)

  • mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22017)

  • mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-34304)

  • mysql: Information Schema unspecified vulnerability (CPU Apr 2026) (CVE-2026-22015)

  • mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) (CVE-2026-34276)

  • mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) (CVE-2026-34270)

  • mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-34278)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:25919
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-34278 4.9

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Record
UBUNTU-CVE-2026-34278
CVSS 3.1
4.9 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVALSA-2026:23332 No score

Moderate: mysql security update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.

Security Fix(es):

  • mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-22004)
  • mysql: Information Schema unspecified vulnerability (CPU Apr 2026) (CVE-2026-22001)
  • mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) (CVE-2026-34271)
  • mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22009)
  • mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-35237)
  • mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-21998)
  • mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22005)
  • mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-35238)
  • mysql: DML unspecified vulnerability (CPU Apr 2026) (CVE-2026-35239)
  • mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22002)
  • mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-35236)
  • mysql: JSON unspecified vulnerability (CPU Apr 2026) (CVE-2026-34308)
  • mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-34303)
  • mysql: DML unspecified vulnerability (CPU Apr 2026) (CVE-2026-34293)
  • mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-35240)
  • mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-34267)
  • mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22017)
  • mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-34304)
  • mysql: Information Schema unspecified vulnerability (CPU Apr 2026) (CVE-2026-22015)
  • mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) (CVE-2026-34276)
  • mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) (CVE-2026-34270)
  • mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-34278)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:23332
Updated
2026-11-02
OSVALSA-2026:25919 No score

Moderate: mysql:8.0 security update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.

Security Fix(es):

  • mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-22004)
  • mysql: Information Schema unspecified vulnerability (CPU Apr 2026) (CVE-2026-22001)
  • mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) (CVE-2026-34271)
  • mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22009)
  • mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-35237)
  • mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-21998)
  • mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22005)
  • mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-35238)
  • mysql: DML unspecified vulnerability (CPU Apr 2026) (CVE-2026-35239)
  • mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22002)
  • mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-35236)
  • mysql: JSON unspecified vulnerability (CPU Apr 2026) (CVE-2026-34308)
  • mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-34303)
  • mysql: DML unspecified vulnerability (CPU Apr 2026) (CVE-2026-34293)
  • mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-35240)
  • mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-34267)
  • mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-22017)
  • mysql: InnoDB unspecified vulnerability (CPU Apr 2026) (CVE-2026-34304)
  • mysql: Information Schema unspecified vulnerability (CPU Apr 2026) (CVE-2026-22015)
  • mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) (CVE-2026-34276)
  • mysql: Group Replication Plugin unspecified vulnerability (CPU Apr 2026) (CVE-2026-34270)
  • mysql: Optimizer unspecified vulnerability (CPU Apr 2026) (CVE-2026-34278)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:25919
Updated
2026-11-02
OSVAZL-83115 No score

CVE-2026-34278 affecting package mysql for versions less than 8.0.46-1

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Record
AZL-83115
Updated
2026-11-02
OSVCLSA-2026-1781015758 No score

mysql: Fix of 22 CVEs

  • Update to MySQL 8.0.46 (April 2026 CPU) CVE-2026-21998 CVE-2026-22001 CVE-2026-22002 CVE-2026-22004 CVE-2026-22005 CVE-2026-22009 CVE-2026-22015 CVE-2026-22017 CVE-2026-34267 CVE-2026-34271 CVE-2026-34276 CVE-2026-34278 CVE-2026-34293 CVE-2026-34303 CVE-2026-34304 CVE-2026-34308 CVE-2026-35236 CVE-2026-35237 CVE-2026-35238 CVE-2026-35239 CVE-2026-35240
Record
CLSA-2026-1781015758
Updated
2026-11-02
OSVCLSA-2026-1781075599 No score

mysql: Fix of 22 CVEs

  • Update to MySQL 8.0.46 (April 2026 CPU) CVE-2026-21998 CVE-2026-22001 CVE-2026-22002 CVE-2026-22004 CVE-2026-22005 CVE-2026-22009 CVE-2026-22015 CVE-2026-22017 CVE-2026-34267 CVE-2026-34271 CVE-2026-34276 CVE-2026-34278 CVE-2026-34293 CVE-2026-34303 CVE-2026-34304 CVE-2026-34308 CVE-2026-35236 CVE-2026-35237 CVE-2026-35238 CVE-2026-35239 CVE-2026-35240
Record
CLSA-2026-1781075599
Updated
2026-11-02
OSVUSN-8363-1 No score

mysql-8.0, mysql-8.4 vulnerabilities

Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues.

MySQL has been updated to 8.0.46 in Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. Ubuntu 25.10 and Ubuntu 26.04 LTS have been updated to MySQL 8.4.9.

In addition to security fixes, the updated packages contain bug fixes, new features, and possibly incompatible changes.

Please see the following for more information:

https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-46.html https://dev.mysql.com/doc/relnotes/mysql/8.4/en/news-8-4-9.html https://www.oracle.com/security-alerts/cpuapr2026.html

Record
USN-8363-1
Updated
2026-11-02
OSVUSN-8363-2 No score

mysql-8.0 vulnerabilities

USN-8363-1 fixed several vulnerabilities in MySQL. This update provides the corresponding fixes for MySQL on Ubuntu 20.04 LTS.

Original advisory details:

Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues.

MySQL has been updated to 8.0.46 in Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. Ubuntu 25.10 and Ubuntu 26.04 LTS have been updated to MySQL 8.4.9.

In addition to security fixes, the updated packages contain bug fixes, new features, and possibly incompatible changes.

Please see the following for more information:

https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-46.html https://dev.mysql.com/doc/relnotes/mysql/8.4/en/news-8-4-9.html https://www.oracle.com/security-alerts/cpuapr2026.html

Record
USN-8363-2
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
mysql
AlmaLinux:9
 before 8.0.46-1.el9_8
8.0.46-1.el9_8
mysql-common
AlmaLinux:9
 before 8.0.46-1.el9_8
8.0.46-1.el9_8
mysql-devel
AlmaLinux:9
 before 8.0.46-1.el9_8
8.0.46-1.el9_8
mysql-errmsg
AlmaLinux:9
 before 8.0.46-1.el9_8
8.0.46-1.el9_8
mysql-libs
AlmaLinux:9
 before 8.0.46-1.el9_8
8.0.46-1.el9_8
mysql-server
AlmaLinux:9
 before 8.0.46-1.el9_8
8.0.46-1.el9_8
mysql-test
AlmaLinux:9
 before 8.0.46-1.el9_8
8.0.46-1.el9_8
mecab
AlmaLinux:8
 before 0.996-2.module_el8.10.0+3965+b415b607
0.996-2.module_el8.10.0+3965+b415b607
mecab
AlmaLinux:8
 before 0.996-2.module_el8.6.0+3340+d764b636
0.996-2.module_el8.6.0+3340+d764b636
mecab-devel
AlmaLinux:8
 before 0.996-2.module_el8.6.0+3340+d764b636
0.996-2.module_el8.6.0+3340+d764b636
Show 87 moreShow less
Affected packages
PackageAffectedFixed
mecab-devel
AlmaLinux:8
 before 0.996-2.module_el8.10.0+3965+b415b607
0.996-2.module_el8.10.0+3965+b415b607
mecab-ipadic
AlmaLinux:8
 before 2.7.0.20070801-17.module_el8.10.0+3965+b415b607
2.7.0.20070801-17.module_el8.10.0+3965+b415b607
mecab-ipadic
AlmaLinux:8
 before 2.7.0.20070801-17.module_el8.10.0+4142+0b28b031
2.7.0.20070801-17.module_el8.10.0+4142+0b28b031
mecab-ipadic-EUCJP
AlmaLinux:8
 before 2.7.0.20070801-17.module_el8.10.0+3965+b415b607
2.7.0.20070801-17.module_el8.10.0+3965+b415b607
mecab-ipadic-EUCJP
AlmaLinux:8
 before 2.7.0.20070801-17.module_el8.10.0+4142+0b28b031
2.7.0.20070801-17.module_el8.10.0+4142+0b28b031
mysql
AlmaLinux:8
 before 8.0.46-1.module_el8.10.0+4192+724bc664
8.0.46-1.module_el8.10.0+4192+724bc664
mysql-common
AlmaLinux:8
 before 8.0.46-1.module_el8.10.0+4192+724bc664
8.0.46-1.module_el8.10.0+4192+724bc664
mysql-devel
AlmaLinux:8
 before 8.0.46-1.module_el8.10.0+4192+724bc664
8.0.46-1.module_el8.10.0+4192+724bc664
mysql-errmsg
AlmaLinux:8
 before 8.0.46-1.module_el8.10.0+4192+724bc664
8.0.46-1.module_el8.10.0+4192+724bc664
mysql-libs
AlmaLinux:8
 before 8.0.46-1.module_el8.10.0+4192+724bc664
8.0.46-1.module_el8.10.0+4192+724bc664
mysql-server
AlmaLinux:8
 before 8.0.46-1.module_el8.10.0+4192+724bc664
8.0.46-1.module_el8.10.0+4192+724bc664
mysql-test
AlmaLinux:8
 before 8.0.46-1.module_el8.10.0+4192+724bc664
8.0.46-1.module_el8.10.0+4192+724bc664
mysql
Azure Linux:3
 before 8.0.46-1
8.0.46-1
mysql
TuxCare:AlmaLinux:9.6
 before 8.0.46-1.el9_6.tuxcare.els1
8.0.46-1.el9_6.tuxcare.els1
mysql-common
TuxCare:AlmaLinux:9.6
 before 8.0.46-1.el9_6.tuxcare.els1
8.0.46-1.el9_6.tuxcare.els1
mysql-devel
TuxCare:AlmaLinux:9.6
 before 8.0.46-1.el9_6.tuxcare.els1
8.0.46-1.el9_6.tuxcare.els1
mysql-errmsg
TuxCare:AlmaLinux:9.6
 before 8.0.46-1.el9_6.tuxcare.els1
8.0.46-1.el9_6.tuxcare.els1
mysql-libs
TuxCare:AlmaLinux:9.6
 before 8.0.46-1.el9_6.tuxcare.els1
8.0.46-1.el9_6.tuxcare.els1
mysql-server
TuxCare:AlmaLinux:9.6
 before 8.0.46-1.el9_6.tuxcare.els1
8.0.46-1.el9_6.tuxcare.els1
mysql-test
TuxCare:AlmaLinux:9.6
 before 8.0.46-1.el9_6.tuxcare.els1
8.0.46-1.el9_6.tuxcare.els1
mysql
TuxCare:AlmaLinux:9.2
 before 8.0.46-1.el9_2.tuxcare.els1
8.0.46-1.el9_2.tuxcare.els1
mysql-common
TuxCare:AlmaLinux:9.2
 before 8.0.46-1.el9_2.tuxcare.els1
8.0.46-1.el9_2.tuxcare.els1
mysql-devel
TuxCare:AlmaLinux:9.2
 before 8.0.46-1.el9_2.tuxcare.els1
8.0.46-1.el9_2.tuxcare.els1
mysql-errmsg
TuxCare:AlmaLinux:9.2
 before 8.0.46-1.el9_2.tuxcare.els1
8.0.46-1.el9_2.tuxcare.els1
mysql-libs
TuxCare:AlmaLinux:9.2
 before 8.0.46-1.el9_2.tuxcare.els1
8.0.46-1.el9_2.tuxcare.els1
mysql-server
TuxCare:AlmaLinux:9.2
 before 8.0.46-1.el9_2.tuxcare.els1
8.0.46-1.el9_2.tuxcare.els1
mysql-test
TuxCare:AlmaLinux:9.2
 before 8.0.46-1.el9_2.tuxcare.els1
8.0.46-1.el9_2.tuxcare.els1
mysql
openEuler:24.03-LTS-SP3
 before 8.0.46-1.oe2403sp3
8.0.46-1.oe2403sp3
mysql
openEuler:24.03-LTS
 before 8.0.46-1.oe2403
8.0.46-1.oe2403
mysql
openEuler:24.03-LTS-SP1
 before 8.0.46-1.oe2403sp1
8.0.46-1.oe2403sp1
mysql
openEuler:20.03-LTS-SP4
 before 8.0.46-1.oe2003sp4
8.0.46-1.oe2003sp4
mysql
openEuler:22.03-LTS-SP4
 before 8.0.46-1.oe2203sp4
8.0.46-1.oe2203sp4
mysql
Red Hat:enterprise_linux:9::appstream
 before 0:8.0.46-1.el9_8
0:8.0.46-1.el9_8
mysql-common
Red Hat:enterprise_linux:9::appstream
 before 0:8.0.46-1.el9_8
0:8.0.46-1.el9_8
mysql-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:8.0.46-1.el9_8
0:8.0.46-1.el9_8
mysql-debugsource
Red Hat:enterprise_linux:9::appstream
 before 0:8.0.46-1.el9_8
0:8.0.46-1.el9_8
mysql-devel-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:8.0.46-1.el9_8
0:8.0.46-1.el9_8
mysql-errmsg
Red Hat:enterprise_linux:9::appstream
 before 0:8.0.46-1.el9_8
0:8.0.46-1.el9_8
mysql-libs
Red Hat:enterprise_linux:9::appstream
 before 0:8.0.46-1.el9_8
0:8.0.46-1.el9_8
mysql-libs-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:8.0.46-1.el9_8
0:8.0.46-1.el9_8
mysql-server
Red Hat:enterprise_linux:9::appstream
 before 0:8.0.46-1.el9_8
0:8.0.46-1.el9_8
mysql-server-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:8.0.46-1.el9_8
0:8.0.46-1.el9_8
mysql-test-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:8.0.46-1.el9_8
0:8.0.46-1.el9_8
mysql-debuginfo
Red Hat:enterprise_linux:9::crb
 before 0:8.0.46-1.el9_8
0:8.0.46-1.el9_8
mysql-debugsource
Red Hat:enterprise_linux:9::crb
 before 0:8.0.46-1.el9_8
0:8.0.46-1.el9_8
mysql-devel
Red Hat:enterprise_linux:9::crb
 before 0:8.0.46-1.el9_8
0:8.0.46-1.el9_8
mysql-devel-debuginfo
Red Hat:enterprise_linux:9::crb
 before 0:8.0.46-1.el9_8
0:8.0.46-1.el9_8
mysql-libs-debuginfo
Red Hat:enterprise_linux:9::crb
 before 0:8.0.46-1.el9_8
0:8.0.46-1.el9_8
mysql-server-debuginfo
Red Hat:enterprise_linux:9::crb
 before 0:8.0.46-1.el9_8
0:8.0.46-1.el9_8
mysql-test
Red Hat:enterprise_linux:9::crb
 before 0:8.0.46-1.el9_8
0:8.0.46-1.el9_8
mysql-test-debuginfo
Red Hat:enterprise_linux:9::crb
 before 0:8.0.46-1.el9_8
0:8.0.46-1.el9_8
mecab
Red Hat:enterprise_linux:8::appstream
 before 0:0.996-2.module+el8.10.0+22857+7f331edd
0:0.996-2.module+el8.10.0+22857+7f331edd
mecab-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:0.996-2.module+el8.10.0+22857+7f331edd
0:0.996-2.module+el8.10.0+22857+7f331edd
mecab-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:0.996-2.module+el8.10.0+22857+7f331edd
0:0.996-2.module+el8.10.0+22857+7f331edd
mecab-devel
Red Hat:enterprise_linux:8::appstream
 before 0:0.996-2.module+el8.10.0+22857+7f331edd
0:0.996-2.module+el8.10.0+22857+7f331edd
mecab-ipadic
Red Hat:enterprise_linux:8::appstream
 before 0:2.7.0.20070801-17.module+el8.10.0+22857+7f331edd
0:2.7.0.20070801-17.module+el8.10.0+22857+7f331edd
mecab-ipadic-EUCJP
Red Hat:enterprise_linux:8::appstream
 before 0:2.7.0.20070801-17.module+el8.10.0+22857+7f331edd
0:2.7.0.20070801-17.module+el8.10.0+22857+7f331edd
mysql
Red Hat:enterprise_linux:8::appstream
 before 0:8.0.46-1.module+el8.10.0+24370+d5a391f0
0:8.0.46-1.module+el8.10.0+24370+d5a391f0
mysql-common
Red Hat:enterprise_linux:8::appstream
 before 0:8.0.46-1.module+el8.10.0+24370+d5a391f0
0:8.0.46-1.module+el8.10.0+24370+d5a391f0
mysql-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:8.0.46-1.module+el8.10.0+24370+d5a391f0
0:8.0.46-1.module+el8.10.0+24370+d5a391f0
mysql-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:8.0.46-1.module+el8.10.0+24370+d5a391f0
0:8.0.46-1.module+el8.10.0+24370+d5a391f0
mysql-devel
Red Hat:enterprise_linux:8::appstream
 before 0:8.0.46-1.module+el8.10.0+24370+d5a391f0
0:8.0.46-1.module+el8.10.0+24370+d5a391f0
mysql-devel-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:8.0.46-1.module+el8.10.0+24370+d5a391f0
0:8.0.46-1.module+el8.10.0+24370+d5a391f0
mysql-errmsg
Red Hat:enterprise_linux:8::appstream
 before 0:8.0.46-1.module+el8.10.0+24370+d5a391f0
0:8.0.46-1.module+el8.10.0+24370+d5a391f0
mysql-libs
Red Hat:enterprise_linux:8::appstream
 before 0:8.0.46-1.module+el8.10.0+24370+d5a391f0
0:8.0.46-1.module+el8.10.0+24370+d5a391f0
mysql-libs-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:8.0.46-1.module+el8.10.0+24370+d5a391f0
0:8.0.46-1.module+el8.10.0+24370+d5a391f0
mysql-server
Red Hat:enterprise_linux:8::appstream
 before 0:8.0.46-1.module+el8.10.0+24370+d5a391f0
0:8.0.46-1.module+el8.10.0+24370+d5a391f0
mysql-server-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:8.0.46-1.module+el8.10.0+24370+d5a391f0
0:8.0.46-1.module+el8.10.0+24370+d5a391f0
mysql-test
Red Hat:enterprise_linux:8::appstream
 before 0:8.0.46-1.module+el8.10.0+24370+d5a391f0
0:8.0.46-1.module+el8.10.0+24370+d5a391f0
mysql-test-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:8.0.46-1.module+el8.10.0+24370+d5a391f0
0:8.0.46-1.module+el8.10.0+24370+d5a391f0
mysql
Rocky Linux:9
 before 0:8.0.46-1.el9_8.rocky.0.1
0:8.0.46-1.el9_8.rocky.0.1
mecab-ipadic
Rocky Linux:8
 before 0:2.7.0.20070801-17.module+el8.10.0+1937+28fbbc83
0:2.7.0.20070801-17.module+el8.10.0+1937+28fbbc83
mecab-ipadic
Rocky Linux:8
 before 0:2.7.0.20070801-17.module+el8.10.0+2091+db4d14f6
0:2.7.0.20070801-17.module+el8.10.0+2091+db4d14f6
mecab
Rocky Linux:8
 before 0:0.996-2.module+el8.10.0+2091+db4d14f6
0:0.996-2.module+el8.10.0+2091+db4d14f6
mecab
Rocky Linux:8
 before 0:0.996-2.module+el8.10.0+1676+9b4b6e24
0:0.996-2.module+el8.10.0+1676+9b4b6e24
mecab
Rocky Linux:8
 before 0:0.996-2.module+el8.10.0+1937+28fbbc83
0:0.996-2.module+el8.10.0+1937+28fbbc83
mysql-5.5
Ubuntu:14.04:LTS
 All versions, plus listed versions
5.5.32-0ubuntu75.5.34-0ubuntu15.5.34-0ubuntu25.5.35-0ubuntu15.5.35+dfsg-1ubuntu1
Show 20 moreShow less
5.5.37-0ubuntu0.14.04.15.5.38-0ubuntu0.14.04.15.5.40-0ubuntu0.14.04.15.5.41-0ubuntu0.14.04.15.5.43-0ubuntu0.14.04.15.5.44-0ubuntu0.14.04.15.5.46-0ubuntu0.14.04.25.5.47-0ubuntu0.14.04.15.5.49-0ubuntu0.14.04.15.5.50-0ubuntu0.14.04.15.5.52-0ubuntu0.14.04.15.5.53-0ubuntu0.14.04.15.5.54-0ubuntu0.14.04.15.5.55-0ubuntu0.14.04.15.5.57-0ubuntu0.14.04.15.5.58-0ubuntu0.14.04.15.5.59-0ubuntu0.14.04.15.5.60-0ubuntu0.14.04.15.5.61-0ubuntu0.14.04.15.5.62-0ubuntu0.14.04.1
 None known
mysql-5.7
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
5.7.11-0ubuntu45.7.11-0ubuntu55.7.11-0ubuntu65.7.12-0ubuntu15.7.12-0ubuntu1.1
Show 31 moreShow less
5.7.13-0ubuntu0.16.04.25.7.15-0ubuntu0.16.04.15.7.16-0ubuntu0.16.04.15.7.17-0ubuntu0.16.04.15.7.17-0ubuntu0.16.04.25.7.18-0ubuntu0.16.04.15.7.19-0ubuntu0.16.04.15.7.20-0ubuntu0.16.04.15.7.21-0ubuntu0.16.04.15.7.22-0ubuntu0.16.04.15.7.23-0ubuntu0.16.04.15.7.24-0ubuntu0.16.04.15.7.25-0ubuntu0.16.04.25.7.26-0ubuntu0.16.04.15.7.27-0ubuntu0.16.04.15.7.28-0ubuntu0.16.04.25.7.29-0ubuntu0.16.04.15.7.30-0ubuntu0.16.04.15.7.31-0ubuntu0.16.04.15.7.32-0ubuntu0.16.04.15.7.33-0ubuntu0.16.04.15.7.35-0ubuntu0.16.04.1+esm15.7.36-0ubuntu0.16.04.1+esm15.7.37-0ubuntu0.16.04.1+esm15.7.38-0ubuntu0.16.04.1+esm15.7.39-0ubuntu0.16.04.1+esm25.7.40-0ubuntu0.16.04.1+esm15.7.41-0ubuntu0.16.04.1+esm15.7.42-0ubuntu0.16.04.1+esm15.7.43-0ubuntu0.16.04.1+esm15.7.44-0ubuntu0.16.04.1+esm1
 None known
percona-server-5.6
Ubuntu:16.04:LTS
 All versions, plus listed versions
5.6.22-rel71.0-0ubuntu25.6.22-rel71.0-0ubuntu45.6.22-rel71.0-0ubuntu4.1
 None known
percona-xtradb-cluster-5.6
Ubuntu:16.04:LTS
 All versions, plus listed versions
5.6.21-25.8-0ubuntu25.6.21-25.8-0ubuntu35.6.21-25.8-0ubuntu3.15.6.21-25.8-0ubuntu3.25.6.34-26.19-0ubuntu0.16.04.15.6.34-26.19-0ubuntu0.16.04.25.6.37-26.21-0ubuntu0.16.04.15.6.37-26.21-0ubuntu0.16.04.2
 None known
mysql-5.7
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.7.19-0ubuntu15.7.20-0ubuntu0.17.10.15.7.20-1ubuntu15.7.21-1ubuntu15.7.22-0ubuntu18.04.1
Show 23 moreShow less
5.7.23-0ubuntu0.18.04.15.7.24-0ubuntu0.18.04.15.7.25-0ubuntu0.18.04.25.7.26-0ubuntu0.18.04.15.7.27-0ubuntu0.18.04.15.7.28-0ubuntu0.18.04.45.7.29-0ubuntu0.18.04.15.7.30-0ubuntu0.18.04.15.7.31-0ubuntu0.18.04.15.7.32-0ubuntu0.18.04.15.7.33-0ubuntu0.18.04.15.7.34-0ubuntu0.18.04.15.7.35-0ubuntu0.18.04.15.7.35-0ubuntu0.18.04.25.7.36-0ubuntu0.18.04.15.7.37-0ubuntu0.18.04.15.7.38-0ubuntu0.18.04.15.7.39-0ubuntu0.18.04.25.7.40-0ubuntu0.18.04.15.7.41-0ubuntu0.18.04.15.7.42-0ubuntu0.18.04.15.7.43-0ubuntu0.18.04.1+esm15.7.44-0ubuntu0.18.04.1+esm1
 None known
mysql-8.0
Ubuntu:Pro:20.04:LTS
 before 8.0.46-0ubuntu0.20.04.1+esm2, plus listed versions
8.0.17-0ubuntu28.0.17-0ubuntu38.0.18-0ubuntu38.0.18-0ubuntu48.0.18-0ubuntu5
Show 35 moreShow less
8.0.19-0ubuntu28.0.19-0ubuntu38.0.19-0ubuntu48.0.19-0ubuntu58.0.20-0ubuntu0.20.04.18.0.21-0ubuntu0.20.04.38.0.21-0ubuntu0.20.04.48.0.22-0ubuntu0.20.04.28.0.22-0ubuntu0.20.04.38.0.23-0ubuntu0.20.04.18.0.25-0ubuntu0.20.04.18.0.26-0ubuntu0.20.04.28.0.26-0ubuntu0.20.04.38.0.27-0ubuntu0.20.04.18.0.28-0ubuntu0.20.04.38.0.29-0ubuntu0.20.04.28.0.29-0ubuntu0.20.04.38.0.30-0ubuntu0.20.04.28.0.31-0ubuntu0.20.04.18.0.31-0ubuntu0.20.04.28.0.32-0buntu0.20.04.18.0.32-0ubuntu0.20.04.28.0.33-0ubuntu0.20.04.18.0.33-0ubuntu0.20.04.28.0.33-0ubuntu0.20.04.48.0.34-0ubuntu0.20.04.18.0.35-0ubuntu0.20.04.18.0.36-0ubuntu0.20.04.18.0.37-0ubuntu0.20.04.38.0.39-0ubuntu0.20.04.18.0.40-0ubuntu0.20.04.18.0.41-0ubuntu0.20.04.18.0.42-0ubuntu0.20.04.18.0.43-0ubuntu0.20.04.1+esm18.0.45-0ubuntu0.20.04.1+esm2
8.0.46-0ubuntu0.20.04.1+esm2
mariadb-10.3
Ubuntu:20.04:LTS
 All versions, plus listed versions
1:10.3.17-11:10.3.18-11:10.3.19-11:10.3.21-21:10.3.22-1
Show 10 moreShow less
1:10.3.22-1ubuntu11:10.3.25-0ubuntu0.20.04.11:10.3.29-0ubuntu0.20.04.11:10.3.30-0ubuntu0.20.04.11:10.3.31-0ubuntu0.20.04.11:10.3.32-0ubuntu0.20.04.11:10.3.34-0ubuntu0.20.04.11:10.3.37-0ubuntu0.20.04.11:10.3.38-0ubuntu0.20.04.11:10.3.39-0ubuntu0.20.04.2
 None known
mysql-8.0
Ubuntu:22.04:LTS
 before 8.0.46-0ubuntu0.22.04.2, plus listed versions
8.0.26-0ubuntu18.0.27-0ubuntu0.21.10.18.0.28-0ubuntu38.0.28-0ubuntu48.0.29-0ubuntu0.22.04.1
Show 23 moreShow less
8.0.29-0ubuntu0.22.04.28.0.29-0ubuntu0.22.04.38.0.30-0ubuntu0.22.04.18.0.31-0ubuntu0.22.04.18.0.32-0buntu0.22.04.18.0.32-0ubuntu0.22.04.28.0.33-0ubuntu0.22.04.18.0.33-0ubuntu0.22.04.28.0.33-0ubuntu0.22.04.48.0.34-0ubuntu0.22.04.18.0.35-0ubuntu0.22.04.18.0.36-0ubuntu0.22.04.18.0.37-0ubuntu0.22.04.38.0.39-0ubuntu0.22.04.18.0.40-0ubuntu0.22.04.18.0.41-0ubuntu0.22.04.18.0.42-0ubuntu0.22.04.18.0.42-0ubuntu0.22.04.28.0.43-0ubuntu0.22.04.18.0.43-0ubuntu0.22.04.28.0.44-0ubuntu0.22.04.18.0.44-0ubuntu0.22.04.28.0.45-0ubuntu0.22.04.1
8.0.46-0ubuntu0.22.04.2
mysql-8.0
Ubuntu:24.04:LTS
 before 8.0.46-0ubuntu0.24.04.2, plus listed versions
8.0.34-1ubuntu18.0.35-1ubuntu18.0.35-1ubuntu28.0.36-18.0.36-2ubuntu1
Show 14 moreShow less
8.0.36-2ubuntu28.0.36-2ubuntu38.0.37-0ubuntu0.24.04.18.0.39-0ubuntu0.24.04.18.0.39-0ubuntu0.24.04.28.0.40-0ubuntu0.24.04.18.0.41-0ubuntu0.24.04.18.0.42-0ubuntu0.24.04.18.0.42-0ubuntu0.24.04.28.0.43-0ubuntu0.24.04.18.0.43-0ubuntu0.24.04.28.0.44-0ubuntu0.24.04.18.0.44-0ubuntu0.24.04.28.0.45-0ubuntu0.24.04.1
8.0.46-0ubuntu0.24.04.2
mysql-8.4
Ubuntu:25.10
 before 8.4.9-0ubuntu0.25.10.1, plus listed versions
8.4.4-0ubuntu28.4.5-0ubuntu18.4.5-0ubuntu28.4.5-0ubuntu38.4.6-0ubuntu1
Show 4 moreShow less
8.4.6-0ubuntu38.4.7-0ubuntu0.25.10.28.4.7-0ubuntu0.25.10.38.4.8-0ubuntu0.25.10.1
8.4.9-0ubuntu0.25.10.1
mysql-8.4
Ubuntu:26.04:LTS
 before 8.4.9-0ubuntu0.26.04.1, plus listed versions
8.4.6-0ubuntu38.4.7-0ubuntu28.4.7-0ubuntu38.4.8-0ubuntu1
8.4.9-0ubuntu0.26.04.1

History

History
WhenChangedSources
2026-11-02createdCVE List, EUVD, GitHub Advisories, NVD, OSV

References

Show 155 moreShow less
This page doesn't list everything

Left out here: the rest of 5 source descriptions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open