Login Request a demo
FI
Product
firebird
by FirebirdSQL · last CVE Apr 17, 2026
46
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Vulnerabilities46In the news0Timeline
Severity mix
Critical 1High 12Medium 2Low 0
Severity
All severities46Critical1High12Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add firebird to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-24975
8.8
1%
Aug 15
Firebird Non-Authorized Access to Encrypted Database Using Execute Statement on External
Affected: < 6.0.0.609; < 5.0.2.1610; < 4.0.6.3183
CVE-2017-11509
8.8
6%
Mar 28
An authenticated remote attacker can execute arbitrary code in Firebird SQL Server versions 2.5.7 and 3.0.2 by executing a malformed SQL statement
Affected: 2.5.7; 3.0.2
CVE-2017-6369
8.8
3%
Mar 24
Insufficient checks in the UDF subsystem in Firebird 2.5.x before 2.5.7 and 3.0.x before 3.0.2 allow remote authenticated users to execute code by using a 'system' entrypoint from…
Affected: 2.5.0 before 2.5.7; 3.0.0 before 3.0.2
CVE-2026-28224
8.2
0%
Apr 17
Firebird Null Pointer Dereference via CryptCallback causes DOS
Affected: >= 3.0.0, < 3.0.14; >= 4.0.0, < 4.0.7; >= 5.0.0, < 5.0.4
CVE-2026-27890
8.2
0%
Apr 17
Firebird has Pre-Auth DOS when Processing Out of Order CNCT_specific_data Segments
Affected: >= 3.0.0, < 3.0.14; >= 4.0.0, < 4.0.7; >= 5.0.0, < 5.0.4
CVE-2026-35215
7.5
0%
Apr 17
Firebird: DoS via malicious slice descriptor in slice packet
Affected: >= 3.0.0, < 3.0.14; >= 4.0.0, < 4.0.7; >= 5.0.0, < 5.0.4
CVE-2026-34232
7.5
0%
Apr 17
Firebird: DoS via `op_response` packet from client
Affected: >= 3.0.0, < 3.0.14; >= 4.0.0, < 4.0.7; >= 5.0.0, < 5.0.4
CVE-2026-33337
7.5
1%
Apr 17
Firebird has a buffer overflow when parsing corrupted slice packets
Affected: >= 3.0.0, < 3.0.14; >= 4.0.0, < 4.0.7; >= 5.0.0, < 5.0.4
CVE-2026-28212
7.5
1%
Apr 17
Firebird has potential server crash via null pointer dereference when processing op_slice packet
Affected: < 3.0.14; >= 4.0.0, < 4.0.7; >= 5.0.0, < 5.0.4
CVE-2025-65104
7.5
0%
Apr 17
Firebird: Information leak vulnerability in firebird3 client when used with newer server
Affected: < 4.0.0
CVE-2025-54989
7.5
1%
Aug 15
Firebird XDR Message Parsing NULL Pointer Dereference Denial-of-Service Vulnerability
Affected: < 3.0.13; < 4.0.6; < 5.0.3
CVE-2023-41038
7.5
1%
Mar 20
Firebird is a relational database
Affected: 4.0.0 through 4.0.3; 5.0
Showing 12