Login Request a demo
MA
Product
MariaDB
by MariaDB · last CVE Oct 16, 2026
435
CVEs
0
On KEV
9.9
Max CVSS
15
New 30D
Vulnerabilities435In the news0Timeline
Severity mix
Critical 11High 72Medium 165Low 9
Severity
All severities435Critical11High72Medium165Low9
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add MariaDB to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-2537
4.9
4%
Jan 16
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL)
Affected: 10.0.0 before 10.0.38; 10.1.0 before 10.1.38; 10.2.0 before 10.2.22; 10.3.0 before 10.3.13
CVE-2018-3282
4.9
4%
Oct 17
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Storage Engines)
Affected: 5.5.0 before 5.5.62; 10.0.0 before 10.0.37; 10.1.0 before 10.1.37; 10.2.0 before 10.2.19; 10.3.0 before 10.3.11
CVE-2018-3277
4.9
3%
Oct 17
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB)
Affected: 10.2.0 before 10.2.19; 10.3.0 before 10.3.11
CVE-2018-3200
4.9
3%
Oct 17
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB)
Affected: 10.2.0 before 10.2.19; 10.3.0 before 10.3.11
CVE-2018-3173
4.9
3%
Oct 17
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB)
Affected: 10.2.0 before 10.2.19; 10.3.0 before 10.3.11
CVE-2018-3162
4.9
3%
Oct 17
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB)
Affected: 10.2.0 before 10.2.19; 10.3.0 before 10.3.11
CVE-2018-3063
4.9
3%
Jul 18
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges)
Affected: 5.5.0 before 5.5.61; 10.0.0 before 10.0.36; 10.1.0 before 10.1.35; 10.2.0 before 10.2.17; 10.3.0 before 10.3.9
CVE-2018-2810
4.9
3%
Apr 19
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB)
Affected: 10.2.0 before 10.2.15
CVE-2018-2781
4.9
3%
Apr 19
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)
Affected: 5.5.0 before 5.5.60; 10.0.0 before 10.0.35; 10.1.0 before 10.1.33; 10.2.0 before 10.2.15
CVE-2018-2777
4.9
3%
Apr 19
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB)
Affected: 10.2.0 before 10.2.15
CVE-2018-2766
4.9
3%
Apr 19
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB)
Affected: 10.0.0 before 10.0.35; 10.1.0 before 10.1.33; 10.2.0 before 10.2.15
CVE-2018-2759
4.9
3%
Apr 19
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB)
Affected: 10.2.0 before 10.2.15
CVE-2017-10320
4.9
2%
Oct 19
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB)
Affected: 10.2.0 before 10.2.8
CVE-2017-3641
4.9
3%
Aug 8
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML)
Affected: 5.5.0 before 5.5.57; 10.0.0 before 10.0.32; 10.1.0 before 10.1.26; 10.2.0 before 10.2.8
CVE-2017-3456
4.9
3%
Apr 24
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML)
Affected: 5.5.0 before 5.5.55; 10.0.0 before 10.0.31; 10.1.0 before 10.1.23; 10.2.0 before 10.2.6
CVE-2016-5630
4.9
2%
Oct 25
Unspecified vulnerability in Oracle MySQL 5.6.31 and earlier and 5.7.13 and earlier allows remote administrators to affect availability via vectors related to Server: InnoDB
Affected: 10.0.0 before 10.0.27
CVE-2016-5629
4.9
3%
Oct 25
Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote administrators to affect availability via vectors related to…
Affected: 5.5.0 before 5.5.52; 10.0.0 before 10.0.28; 10.1.0 before 10.1.18
CVE-2016-5440
4.9
4%
Jul 21
Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before…
Affected: 5.5.20 before 5.5.50; 10.0.0 before 10.0.26; 10.1.0 before 10.1.15
CVE-2016-3459
4.9
3%
Jul 21
Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier and MariaDB 10.0.x before 10.0.25 and 10.1.x before 10.1.14 allows remote administrators to…
Affected: 10.0.0 before 10.0.25; 10.1.0 before 10.1.14
CVE-2017-3313
4.7
0%
Jan 27
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: MyISAM)
Affected: 5.5.0 before 5.5.55; 10.0.0 before 10.0.30; 10.1.0 before 10.1.22; 10.2.0 before 10.2.5
CVE-2016-0655
4.7
2%
Apr 21
Unspecified vulnerability in Oracle MySQL 5.6.29 and earlier and 5.7.11 and earlier and MariaDB 10.0.x before 10.0.25 and 10.1.x before 10.1.14 allows local users to affect…
Affected: 10.0.0 before 10.0.25; 10.1.0 before 10.1.14
CVE-2016-0642
4.7
1%
Apr 21
Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier allows local users to affect integrity and availability via vectors…
Affected: 5.5.0 before 5.5.47; 10.0.0 before 10.0.23; 10.1.0 before 10.1.10
CVE-2026-107817
4.4
0%
Oct 9
MariaDB: mysql_json plugin OOB reads
Affected: 10.6.1 before 10.6.28; 10.11.1 before 10.11.19; 11.4.1 before 11.4.13; 11.8.1 before 11.8.9; 12.3.1 before 12.3.3; 13.0.1 before 13.0.2
CVE-2022-21595
4.4
1%
Oct 18
Vulnerability in the MySQL Server product of Oracle MySQL (component: C API)
Affected: 10.2.0 before 10.2.42; 10.3.0 before 10.3.33; 10.4.0 before 10.4.23; 10.5.0 before 10.5.14; 10.6.0 before 10.6.6; 10.7.0 before 10.7.2
CVE-2022-21451
4.4
1%
Apr 19
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB)
Affected: 10.2.0 before 10.2.38; 10.3.0 before 10.3.29; 10.4.0 before 10.4.19; 10.5.0 before 10.5.10
CVE-2021-2372
4.4
3%
Jul 21
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB)
Affected: after 10.2.0 before 10.2.40; after 10.3.0 before 10.3.31; after 10.4.0 before 10.4.21; after 10.5.0 before 10.5.12; after 10.6.0 before 10.6.4
CVE-2021-2174
4.4
2%
Apr 22
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB)
Affected: 10.2.0 before 10.2.18
CVE-2021-2022
4.4
2%
Jan 20
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB)
Affected: 10.1.0 before 10.1.46; 10.2.0 before 10.2.33; 10.3.0 before 10.3.24; 10.4.0 before 10.4.14; 10.5.0 before 10.5.5
CVE-2019-2938
4.4
3%
Oct 16
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB)
Affected: 10.2.0 before 10.2.28; 10.3.0 before 10.3.19; 10.4.0 before 10.4.9
CVE-2019-2614
4.4
3%
Apr 23
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication)
Affected: 5.5.0 before 5.5.64; 10.1.0 before 10.1.39; 10.2.0 before 10.2.24; 10.3.0 before 10.3.15; 10.4.0 before 10.4.5
CVE-2018-3284
4.4
2%
Oct 17
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB)
Affected: 10.2.0 before 10.2.19; 10.3.0 before 10.3.11
CVE-2018-2771
4.4
4%
Apr 19
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Locking)
Affected: 5.5.0 before 5.5.60; 10.0.0 before 10.0.35; 10.1.0 before 10.1.33; 10.2.0 before 10.2.15
CVE-2017-10286
4.4
2%
Oct 19
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB)
Affected: 10.0.0 before 10.0.32; 10.1.0 before 10.1.26; 10.2.0 before 10.2.8
CVE-2017-3243
4.4
4%
Jan 27
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Charsets)
Affected: 5.5.0 before 5.5.54; 10.0.0 before 10.0.29; 10.1.0 before 10.1.21
CVE-2016-5584
4.4
1%
Oct 25
Unspecified vulnerability in Oracle MySQL 5.5.52 and earlier, 5.6.33 and earlier, and 5.7.15 and earlier allows remote administrators to affect confidentiality via vectors related…
Affected: 5.5.0 before 5.5.53; 10.0.0 before 10.0.28; 10.1.0 before 10.1.19
CVE-2026-85745
4.3
1%
Oct 16
MariaDB: Out-of-bound buffer read on in `ST_Area` of a multipolygon.
Affected: 10.6.1 before 10.6.28; 10.11.1 before 10.11.19; 11.4.1 before 11.4.13; 11.8.1 before 11.8.9; 12.3.1 before 12.3.3; 13.0.1
CVE-2026-44169
4.3
0%
Jun 12
MariaDB: Authorization bypass in role-based routine-level privilege check exposes stored routine definitions
Affected: 11.4.1 before 11.4.11; 11.8.1 before 11.8.7; 12.3.1
CVE-2026-3494
4.3
0%
Mar 3
MariaDB Server Audit Plugin Comment Handling Bypass
Affected: through 10.6.24; 10.7.0 through 10.11.15; 11.0.0 through 11.4.9; 11.5.0 through 11.8.5
CVE-2021-2032
4.3
2%
Jan 20
Vulnerability in the MySQL Server product of Oracle MySQL (component: Information Schema)
Affected: 10.0.0 before 10.0.11
CVE-2018-3058
4.3
2%
Jul 18
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: MyISAM)
Affected: 5.5.0 before 5.5.61; 10.0.0 before 10.0.36; 10.1.0 before 10.1.35; 10.2.0 before 10.2.17; 10.3.0 before 10.3.9
CVE-2018-2813
4.3
3%
Apr 19
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL)
Affected: 5.5.0 before 5.5.60; 10.0.0 before 10.0.35; 10.1.0 before 10.1.33; 10.2.0 before 10.2.15
CVE-2017-3651
4.3
2%
Aug 8
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client mysqldump)
Affected: 5.5.0 before 5.5.53; 10.0.0 before 10.0.28; 10.1.0 before 10.1.19
CVE-2017-3464
4.3
2%
Apr 24
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL)
Affected: 5.5.0 before 5.5.55; 10.0.0 before 10.0.31; 10.1.0 before 10.1.23; 10.2.0 before 10.2.6
CVE-2016-8283
4.3
7%
Oct 25
Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via vectors…
Affected: 5.5.20 before 5.5.52; 10.0.0 before 10.0.28; 10.1.0 before 10.1.38
CVE-2017-10268
4.1
1%
Oct 19
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication)
Affected: 5.5.0 before 5.5.58; 10.0.0 before 10.0.33; 10.1.0 before 10.1.29; 10.2.0 before 10.2.10
CVE-2016-0668
4.1
2%
Apr 21
Unspecified vulnerability in Oracle MySQL 5.6.28 and earlier and 5.7.10 and earlier and MariaDB 10.0.x before 10.0.24 and 10.1.x before 10.1.12 allows local users to affect…
Affected: 10.0.0 before 10.0.24; 10.1.0 through 10.1.12
CVE-2017-3318
4.0
0%
Jan 27
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Error Handling)
Affected: 5.5.0 before 5.5.54; 10.0.0 before 10.0.29; 10.1.0 before 10.1.21
CVE-2017-3317
4.0
0%
Jan 27
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Logging)
Affected: 5.5.0 before 5.5.54; 10.0.0 before 10.0.29; 10.1.0 before 10.1.21
CVE-2017-10365
3.8
2%
Oct 19
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB)
Affected: 10.2.0 before 10.2.8
CVE-2021-2007
3.7
2%
Jan 20
Vulnerability in the MySQL Client product of Oracle MySQL (component: C API)
Affected: 5.5.0 before 5.5.65; 10.1.0 before 10.1.41; 10.2.0 before 10.2.26; 10.3.0 before 10.3.17; 10.4.0 before 10.4.7
Page 5 of 9 · 435 total
1…456…9