Login Request a demo
MA
Product
MariaDB
by MariaDB · last CVE Oct 16, 2026
431
CVEs
0
On KEV
9.9
Max CVSS
15
New 30D
Vulnerabilities431In the news0Timeline
Severity mix
Critical 11High 72Medium 161Low 9
Severity
All severities431Critical11High72Medium161Low9
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add MariaDB to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-46659
5.5
1%
Jan 29
MariaDB before 10.7.2 allows an application crash because it does not recognize that SELECT_LEX::nest_level is local to each VIEW
Affected: 5.5.0 before 10.2.42; 10.3.0 before 10.3.33; 10.4.0 before 10.4.23; 10.5.0 before 10.5.14; 10.6.0 before 10.6.6; 10.7.0 before 10.7.2
CVE-2021-46658
5.5
0%
Jan 29
save_window_function_values in MariaDB before 10.6.3 allows an application crash because of incorrect handling of with_window_func=true for a subquery
Affected: 10.2.0 before 10.2.40; 10.3.0 before 10.3.31; 10.4.0 before 10.4.21; 10.5.0 before 10.5.12; 10.6.0 before 10.6.3
CVE-2021-46657
5.5
0%
Jan 29
get_sort_by_table in MariaDB before 10.6.2 allows an application crash via certain subquery uses of ORDER BY
Affected: 5.5.20 through 5.5.68; 10.0.0 before 10.2.39; 10.3.0 before 10.3.30; 10.4.0 before 10.4.20; 10.5.0 before 10.5.11; 10.6.0 before 10.6.2
CVE-2021-35604
5.5
3%
Oct 20
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB)
Affected: 10.2.0 before 10.2.41; 10.3.0 before 10.3.32; 10.4.0 before 10.4.22; 10.5.0 before 10.5.13; 10.6.0 before 10.6.3
CVE-2020-2760
5.5
3%
Apr 15
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB)
Affected: 10.2.0 before 10.2.32; 10.3.0 before 10.3.23; 10.4.0 before 10.4.13
CVE-2015-2326
5.5
2%
Jan 14
The pcre_compile2 function in PCRE before 8.37 allows context-dependent attackers to compile incorrect code and cause a denial of service (out-of-bounds read) via regular…
Affected: 10.0.0 before 10.0.18
CVE-2019-2758
5.5
3%
Jul 23
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB)
Affected: 10.2.0 before 10.2.26; 10.3.0 before 10.3.17; 10.4.0 before 10.4.7
CVE-2018-3185
5.5
3%
Oct 17
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB)
Affected: 10.2.0 before 10.2.19; 10.3.0 before 10.3.11
CVE-2018-2787
5.5
3%
Apr 19
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB)
Affected: 10.0.0 before 10.0.35; 10.1.0 before 10.1.33; 10.2.0 before 10.2.15
CVE-2018-2786
5.5
3%
Apr 19
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB)
Affected: 10.2.0 before 10.2.15
CVE-2016-7440
5.5
0%
Dec 13
The C software implementation of AES Encryption and Decryption in wolfSSL (formerly CyaSSL) before 3.9.10 makes it easier for local users to discover AES keys by leveraging…
Affected: 5.5.0 before 5.5.53; 10.0.0 before 10.0.28; 10.1.0 before 10.1.19
CVE-2016-0666
5.5
2%
Apr 21
Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier and MariaDB before 5.5.49, 10.0.x before 10.0.25, and 10.1.x before…
Affected: 5.5.20 before 5.5.49; 10.0.0 before 10.0.25; 10.1.0 before 10.1.14
CVE-2016-0651
5.5
1%
Apr 21
Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier allows local users to affect availability via vectors related to Optimizer
Affected: 5.5.0 before 5.5.47; 10.0.0 before 10.0.23; 10.1.0 before 10.1.10
CVE-2016-0650
5.5
2%
Apr 21
Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x before…
Affected: 5.5.20 before 5.5.48; 10.0.0 before 10.0.24; 10.1.0 before 10.1.12
CVE-2016-0649
5.5
2%
Apr 21
Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x before…
Affected: 5.5.20 before 5.5.48; 10.0.0 before 10.0.24; 10.1.0 before 10.1.12
CVE-2016-0648
5.5
2%
Apr 21
Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier and MariaDB before 5.5.49, 10.0.x before 10.0.25, and 10.1.x before…
Affected: 5.5.20 before 5.5.49; 10.0.0 before 10.0.25; 10.1.0 before 10.1.14
CVE-2016-0647
5.5
2%
Apr 21
Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier and MariaDB before 5.5.49, 10.0.x before 10.0.25, and 10.1.x before…
Affected: 5.5.20 before 5.5.49; 10.0.0 before 10.0.25; 10.1.0 before 10.1.14
CVE-2016-0646
5.5
2%
Apr 21
Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x before…
Affected: 5.5.20 before 5.5.48; 10.0.0 before 10.0.24; 10.1.0 before 10.1.12
CVE-2016-0644
5.5
2%
Apr 21
Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x before…
Affected: 5.5.20 before 5.5.48; 10.0.0 before 10.0.24; 10.1.0 before 10.1.12
CVE-2026-85985
5.4
0%
Oct 16
MariaDB: Unauthorized file access via CONNECT engine UDFs
Affected: 10.6.1 before 10.6.28; 10.11.1 before 10.11.19; 11.4.1 before 11.4.13; 11.8.1 before 11.8.9; 12.3.1 before 12.3.3; 13.0.1
CVE-2013-0375
5.4
2%
Jan 17
Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.1.28 and earlier, allows remote authenticated users to affect confidentiality and…
Affected: 5.1.0 before 5.1.67; 5.2.0 before 5.2.14; 5.3.0 before 5.3.12
CVE-2026-44173
5.3
1%
Jun 12
MariaDB: FILE privilege was not checked for subqueries in the FROM clause
Affected: 10.6.1 before 10.6.26; 10.11.1 before 10.11.17; 11.4.1 before 11.4.11; 11.8.1 before 11.8.7; 12.3.1
CVE-2020-14550
5.3
2%
Jul 15
Vulnerability in the MySQL Client product of Oracle MySQL (component: C API)
Affected: 5.5.0 before 5.5.61; 10.0.0 before 10.0.35; 10.1.0 before 10.1.33; 10.2.0 before 10.2.15
CVE-2020-2752
5.3
2%
Apr 15
Vulnerability in the MySQL Client product of Oracle MySQL (component: C API)
Affected: 5.5.0 before 5.5.68; 10.1.0 before 10.1.45; 10.2.0 before 10.2.32; 10.3.0 before 10.3.23; 10.4.0 before 10.4.13
CVE-2018-3174
5.3
1%
Oct 17
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs)
Affected: 5.5.0 before 5.5.62; 10.0.0 before 10.0.37; 10.1.0 before 10.1.37; 10.2.0 before 10.2.19; 10.3.0 before 10.3.11
CVE-2017-3636
5.3
0%
Aug 8
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs)
Affected: 5.5.0 before 5.5.57; 10.0.0 before 10.0.32; 10.1.0 before 10.1.26; 10.2.0 before 10.2.8
CVE-2016-3615
5.3
6%
Jul 21
Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before…
Affected: 5.5.20 before 5.5.50; 10.0.0 before 10.0.26; 10.1.0 before 10.1.15
CVE-2019-2739
5.1
1%
Jul 23
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges)
Affected: 5.5.0 before 5.5.65; 10.1.0 before 10.1.41; 10.2.0 before 10.2.26; 10.3.0 before 10.3.17; 10.4.0 before 10.4.7
CVE-2016-0641
5.1
2%
Apr 21
Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x before…
Affected: 5.5.20 through 5.5.47; 10.0.0 before 10.0.24; 10.1.0 before 10.1.12
CVE-2018-3081
5.0
3%
Jul 18
Vulnerability in the MySQL Client component of Oracle MySQL (subcomponent: Client programs)
Affected: 5.5.0 before 5.5.61; 10.0.0 before 10.0.35; 10.1.0 before 10.1.33; 10.2.0 before 10.2.15
CVE-2023-22084
4.9
2%
Oct 17
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB)
Affected: 10.4.0 before 10.4.32; 10.5.0 before 10.5.23; 10.6.0 before 10.6.16; 10.10.0 before 10.10.7; 10.11.0 before 10.11.6; 11.0.0 before 11.0.4; +2 more
CVE-2022-21427
4.9
2%
Apr 19
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS)
Affected: 10.2.0 before 10.2.44; 10.3.0 before 10.3.35; 10.4.0 before 10.4.25; 10.5.0 before 10.5.7
CVE-2021-2194
4.9
2%
Apr 22
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB)
Affected: 10.2.0 before 10.2.35; 10.3.0 before 10.3.26; 10.4.0 before 10.4.16; 10.5.0 before 10.5.7
CVE-2021-2180
4.9
3%
Apr 22
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB)
Affected: 10.2.0 before 10.2.38
CVE-2021-2166
4.9
5%
Apr 22
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML)
Affected: 10.2.0 before 10.2.38; 10.3.0 before 10.3.29; 10.4.0 before 10.4.19; 10.5.0 before 10.5.10
CVE-2021-2154
4.9
3%
Apr 22
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML)
Affected: 10.2.0 before 10.2.38; 10.3.0 before 10.3.29; 10.4.0 before 10.4.19; 10.5.0 before 10.5.10
CVE-2020-14812
4.9
3%
Oct 21
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Locking)
Affected: 10.1.0 before 10.1.48; 10.2.0 before 10.2.35; 10.3.0 before 10.3.26; 10.4.0 before 10.4.16; 10.5.0 before 10.5.7
CVE-2020-14789
4.9
3%
Oct 21
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS)
Affected: 10.2.0 before 10.2.35; 10.3.0 before 10.3.26; 10.4.0 before 10.4.16; 10.5.0 before 10.5.7
CVE-2020-14776
4.9
3%
Oct 21
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB)
Affected: 10.2.0 before 10.2.35; 10.3.0 before 10.3.26; 10.4.0 before 10.4.16; 10.5.0 before 10.5.7
CVE-2020-2814
4.9
3%
Apr 15
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB)
Affected: 10.1.0 before 10.1.45; 10.2.0 before 10.2.32; 10.3.0 before 10.3.23; 10.4.0 before 10.4.13
CVE-2020-2812
4.9
3%
Apr 15
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure)
Affected: 5.5.0 before 5.5.68; 10.1.0 before 10.1.45; 10.2.0 before 10.2.32; 10.3.0 before 10.3.23; 10.4.0 before 10.4.13
CVE-2019-2737
4.9
4%
Jul 23
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Pluggable Auth)
Affected: 5.5.0 before 5.5.65; 10.1.0 before 10.1.41; 10.2.0 before 10.2.26; 10.3.0 before 10.3.17; 10.4.0 before 10.4.7
CVE-2019-2628
4.9
3%
Apr 23
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB)
Affected: 10.2.0 before 10.2.24; 10.3.0 before 10.3.15; 10.4.0 before 10.4.5
CVE-2019-2627
4.9
3%
Apr 23
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges)
Affected: 5.5.0 before 5.5.64; 10.1.0 before 10.1.39; 10.2.0 before 10.2.24; 10.3.0 before 10.3.15; 10.4.0 before 10.4.5
CVE-2019-2510
4.9
3%
Jan 16
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB)
Affected: 10.2.0 before 10.2.22; 10.3.0 before 10.3.13
CVE-2019-2537
4.9
4%
Jan 16
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL)
Affected: 10.0.0 before 10.0.38; 10.1.0 before 10.1.38; 10.2.0 before 10.2.22; 10.3.0 before 10.3.13
CVE-2019-2481
4.9
3%
Jan 16
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)
Affected: 5.5.0 before 5.5.37; 10.0.0 before 10.0.11
CVE-2018-3282
4.9
4%
Oct 17
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Storage Engines)
Affected: 5.5.0 before 5.5.62; 10.0.0 before 10.0.37; 10.1.0 before 10.1.37; 10.2.0 before 10.2.19; 10.3.0 before 10.3.11
CVE-2018-3277
4.9
3%
Oct 17
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB)
Affected: 10.2.0 before 10.2.19; 10.3.0 before 10.3.11
CVE-2018-3200
4.9
3%
Oct 17
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB)
Affected: 10.2.0 before 10.2.19; 10.3.0 before 10.3.11
Page 4 of 9 · 431 total
1…345…9