Skip to content
Mariadb vulnerabilities
Newest
-
devolutions server
MariaDB server: Authorization bypass via ALTER TABLE ... CONVERT ... PARTITION
CVE-2026-102523
Fix available
8.0 High
-
devolutions server, mariadb +1 more
MariaDB: Insufficient quoting in mariadb-dump and SHOW commands
CVE-2026-86047
Fix available
7.7 High
-
devolutions server, mariadb +1 more
MariaDB: Out-of-bound buffer read on in `ST_Area` of a multipolygon.
CVE-2026-85745
Fix available
4.3 Medium
-
devolutions server, mariadb +1 more
MariaDB: Use-after-free with a large number of SYS_REFCURSOR's
CVE-2026-85748
Fix available
9.9 Critical
-
devolutions server, mariadb +1 more
MariaDB: Out-of-bound buffer write on in `ST_AsText` of nested GeometryCollections
CVE-2026-85746
Fix available
9.9 Critical
-
devolutions server, mariadb +1 more
MariaDB: GRANT PROXY with empty password incorrectly checks grantor's privileges
CVE-2026-97380
Fix available
8.8 High
-
devolutions server, mariadb +1 more
MariaDB: Unauthorized file access via CONNECT engine UDFs
CVE-2026-85985
Fix available
5.4 Medium
-
devolutions server, mariadb +1 more
MariaDB: privilege escalation via incorrect view frm parsing
CVE-2026-107823
Fix available
7.2 High
-
devolutions server, mariadb +1 more
MariaDB: database privilege escalation via user / role name collision in the acl cache
CVE-2026-107822
Fix available
6.4 Medium
-
devolutions server, mariadb +1 more
MariaDB: insufficient validation of binary frm data when opening a table
CVE-2026-107821
Public exploitFix available
8.0 High
-
devolutions server
MariaDB Connector/C: libmariadb allowed cleartext password leakage on TLS hostname verification failure
CVE-2026-107819
Fix available
5.9 Medium
-
devolutions server, mariadb +1 more
MariaDB: environment injection via wsrep bootstrap in the mariadb.service file
CVE-2026-107818
Fix available
8.4 High
-
devolutions server, mariadb +1 more
MariaDB: mysql_json plugin OOB reads
CVE-2026-107817
Fix available
4.4 Medium
-
devolutions server, mariadb +1 more
MariaDB: `qc_info` plugin can do OOB reads if query contains \0
CVE-2026-107816
Fix available
6.4 Medium
-
devolutions server, mariadb +1 more
MariaDB: one byte OOB write in DOS tables of the CONNECT engine
CVE-2026-107815
Fix available
8.5 High
-
devolutions server, mariadb +1 more
MariaDB: Insecure $HOME in MariaDB rpm packages
CVE-2026-107814
Fix available
8.4 High
-
devolutions server, mariadb +1 more
MariaDB: Numerous issues caused by historical #mysql50# tablename encoding bypass.
CVE-2026-92262
Public exploitFix available
9.9 Critical
-
devolutions server, mariadb, red hat enterprise linux 10 +6 more +8 more
MariaDB server has unsafe parameter handling in `wsrep_notify_cmd`
CVE-2026-49261
Fix available
10.0 Critical
-
devolutions server, mariadb, red hat enterprise linux 7 +6 more +8 more
MariaDB: unsafe usage of `wsrep_sst_receive_address` values on the joiner side
CVE-2026-48165
Fix available
8.0 High
-
devolutions server, mariadb, red hat enterprise linux 10 +5 more +7 more
MariaDB: wsrep SST unsafe parameter handling on the donor side (rsync)
CVE-2026-48163
Fix available
8.0 High
-
devolutions server, mariadb, red hat enterprise linux 10 +4 more +6 more
MariaDB: FILE privilege was not checked for subqueries in the FROM clause
CVE-2026-44173
Fix available
5.0 Medium
-
devolutions server, mariadb, red hat enterprise linux 10 +6 more +8 more
MariaDB: mysql_real_escape_string() incorrectly handled big5
CVE-2026-44172
Fix available
6.9 Medium
-
devolutions server, mariadb +1 more
MariaDB: path traversal in mbstream
CVE-2026-44171
Fix available
6.3 Medium
-
devolutions server, mariadb, red hat enterprise linux 10 +5 more +7 more
MariaDB: Argument injection in CONNECT REST Xcurl on Windows via unsanitized URL
CVE-2026-44170
Fix available
6.3 Medium
-
devolutions server, mariadb +1 more
MariaDB: Authorization bypass in role-based routine-level privilege check exposes stored routine definitions
CVE-2026-44169
Fix available
4.3 Medium
-
devolutions server, mariadb, red hat enterprise linux 10 +4 more +6 more
MariaDB: wsrep SST unsafe parameter handling on the donor side
CVE-2026-44168
Fix available
8.0 High
-
mariadb
An issue was discovered in MariaDB Server before 11.4.10, 11.5.x through 11.8.x before 11.8.6,...
CVE-2026-35549
Fix available
6.5 Medium
-
devolutions server, mariadb +1 more
Heap-based Buffer Overflow in MariaDB
CVE-2026-32710
Public exploitFix available
8.6 High
-
mariadb, mariadb foundation server, amazon aurora mysql +3 more +5 more
MariaDB Server Audit Plugin Comment Handling Bypass
CVE-2026-3494
Public exploitFix available
5.3 Medium
-
mariadb
MariaDB mariadb-dump Utility Directory Traversal Remote Code Execution Vulnerability
CVE-2025-13699
Fix available
7.0 High
-
mariadb model context protocol
An issue was discovered in MariaDB MCP 0.1.0 allowing attackers to gain sensitive information via...
CVE-2025-56404
7.5 High
-
mariadb
MariaDB Server 10.10 through 10.11.* and 11.0 through 11.4.* crashes in JOIN:...
CVE-2023-52971
Fix available
4.9 Medium
-
mariadb
MariaDB Server 10.4 through 10.5.*, 10.6 through 10.6.*, 10.7 through 10.11.*, 11.0 through 11.0....
CVE-2023-52970
Fix available
4.9 Medium
-
mariadb
MariaDB Server 10.4 through 10.5.*, 10.6 through 10.6.*, 10.7 through 10.11.*, and 11.0 through...
CVE-2023-52969
Fix available
4.9 Medium
-
mariadb
MariaDB Server 10.4 before 10.4.33, 10.5 before 10.5.24, 10.6 before 10.6.17, 10.7 through 10.11...
CVE-2023-52968
Fix available
4.9 Medium
-
mariadb
An issue in MYSQL MariaDB v.11.1 allows a remote attacker to execute arbitrary code via the...
CVE-2024-27766
Public exploitFix availableDisputed
5.7 Medium
-
mariadb
Insecure permissions in the sys_exec function of Oracle MYSQL MariaDB v10.5 allows authenticated...
CVE-2023-39593
Public exploitDisputed
5.6 Medium
-
mariadb
MariaDB v10.5 was discovered to contain a remote code execution (RCE) vulnerability.
CVE-2023-26785
Disputed
9.8 Critical
-
oracle mysql, oracle corporation mysql server, fedoraproject fedora +2 more +4 more
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported...
CVE-2023-22084
Fix available
4.9 Medium
-
mariadb, fedoraproject fedora, red hat enterprise linux 7 +18 more +20 more
Mariadb: node crashes with transport endpoint is not connected mysqld got signal 6
CVE-2023-5157
Fix available
7.5 High
-
mariadb maxscale
An issue was discovered in MariaDB MaxScale before 23.02.3. A user enters an encrypted password...
CVE-2023-40354
6.5 Medium
-
mariadb
MariaDB Server before 10.3.34 thru 10.9.3 is vulnerable to Denial of Service. It is possible for...
CVE-2022-47015
Fix available
6.5 Medium
-
mariadb, fedoraproject fedora +1 more
In MariaDB before 10.9.2, compress_write in extra/mariabackup/ds_compress.cc does not release...
CVE-2022-38791
Fix available
5.5 Medium
-
oracle mysql, oracle corporation mysql server, mariadb +2 more +4 more
Vulnerability in the MySQL Server product of Oracle MySQL (component: C API). Supported versions...
CVE-2022-21595
Fix available
4.4 Medium
-
mariadb, debian linux +1 more
MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component...
CVE-2022-32088
Fix available
7.5 High
-
mariadb, debian linux +1 more
MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Item_args...
CVE-2022-32087
Fix available
7.5 High
-
mariadb
MariaDB v10.4 to v10.8 was discovered to contain a segmentation fault via the component...
CVE-2022-32086
Fix available
7.5 High
-
mariadb, debian linux +1 more
MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component...
CVE-2022-32085
Fix available
7.5 High
-
mariadb, debian linux +1 more
MariaDB v10.2 to v10.6.1 was discovered to contain a segmentation fault via the component...
CVE-2022-32083
Fix available
7.5 High
-
mariadb, debian linux, fedoraproject fedora +2 more
MariaDB v10.7 was discovered to contain an use-after-poison in in __interceptor_memset at ...
CVE-2022-32091
Fix available
7.5 High
- Show olderLoading…