CD
Product
C Driver
by MongoDB, Inc. · last CVE Sep 17, 2026
5
CVEs
0
On KEV
8.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 1Low 1
Watch

Add C Driver to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-93393
8.1
0%
Sep 17
Heap overflow via oversized decrypted TLS record sequence in Windows Secure Channel stream
Affected: 2.4.0; 2.3.0 through 2.3.3; 2.2.0 through 2.2.4; 2.1.0 through 2.1.2; 2.0.0 through 2.0.2; 1.30.0 through 1.30.8; +6 more
CVE-2026-6231
7.5
0%
Apr 13
bson_validate may skip validation when processing certain inputs
Affected: 1.0 before 1.30.5; 2.0 before 2.0.2
CVE-2026-9100
7.1
0%
May 20
Heap memory out of bounds read and crash in C Driver legacy GridFS file reader
Affected: 1.0 before 1.30.8; 2.0 before 2.2.4
CVE-2026-93395
5.3
0%
Sep 17
Integer Underflow → Heap Out-of-Bounds Read in `bson_new_from_buffer()
Affected: 2.0.0 before 2.3.1
CVE-2026-93394
3.7
0%
Sep 17
libmongoc SCRAM client nonce-validation bypass
Affected: 2.0.0 before 2.3.2
Showing 5