Login Request a demo
MY
Database
MySQL
by Oracle · last CVE Apr 21, 2026
1,327
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities1,327In the news1Timeline
Severity mix
Critical 7High 43Medium 450Low 0
Severity
All severities500Critical7High43Medium450Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add MySQL to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-11656
9.8
9%
Apr 9
In SQLite through 3.31.1, the ALTER TABLE implementation has a use-after-free, as demonstrated by an ORDER BY clause that belongs to a compound SELECT statement
Affected: 8.0.0 through 8.0.22
CVE-2019-14540
9.8
11%
Sep 15
A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10
Affected: 5.7.0 through 5.7.30; 8.0.0 through 8.0.20
CVE-2016-9843
9.8
6%
May 23
The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation
Affected: 5.5.0 through 5.5.61; 5.6.0 through 5.6.41; 5.7.0 through 5.7.23; 8.0.0 through 8.0.12
CVE-2016-9841
9.8
8%
May 23
inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic
Affected: 5.5.0 through 5.5.61; 5.6.0 through 5.6.41; 5.7.0 through 5.7.23; 8.0.0 through 8.0.12
CVE-2016-6662
9.8
68%
Sep 20
Oracle MySQL through 5.5.52, 5.6.x through 5.6.33, and 5.7.x through 5.7.15; MariaDB before 5.5.51, 10.0.x before 10.0.27, and 10.1.x before 10.1.17; and Percona Server before…
Affected: 5.5.0 through 5.5.52; 5.6.0 through 5.6.33; 5.7.0 through 5.7.15
CVE-2016-0639
9.8
10%
Apr 21
Unspecified vulnerability in Oracle MySQL 5.6.29 and earlier and 5.7.11 and earlier allows remote attackers to affect confidentiality, integrity, and availability via vectors…
Affected: 5.6.0 through 5.6.29; 5.7.0 through 5.7.11
CVE-2016-0705
9.8
26%
Mar 3
Double free vulnerability in the dsa_priv_decode function in crypto/dsa/dsa_ameth.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allows remote attackers to cause a…
Affected: 5.6.0 through 5.6.29; 5.7.0 through 5.7.11
CVE-2016-9842
8.8
5%
May 23
The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers
Affected: 5.5.0 through 5.5.61; 5.6.0 through 5.6.41; 5.7.0 through 5.7.23; 8.0.0 through 8.0.12
CVE-2016-9840
8.8
5%
May 23
inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic
Affected: 5.5.0 through 5.5.61; 5.6.0 through 5.6.41; 5.7.0 through 5.7.23; 8.0.0 through 8.0.12
CVE-2016-3477
8.1
0%
Jul 21
Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before…
Affected: 5.5.0 through 5.5.49; 5.6.0 through 5.6.30; 5.7.0 through 5.7.12
CVE-2020-14878
8.0
1%
Oct 21
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: LDAP Auth)
Affected: 8.0.0 through 8.0.21
CVE-2002-0969
7.8
1%
Oct 11
Buffer overflow in MySQL daemon (mysqld) before 3.23.50, and 4.0 beta before 4.02, on the Win32 platform, allows local users to execute arbitrary code via a long "datadir"…
Affected: before 3.23.50; 4.0.0 through 4.0.2
CVE-2020-5258
7.7
4%
Mar 10
Prototype pollution in dojo
Affected: 7.3.0 through 7.3.29; 7.4.0 through 7.4.28; 7.5.0 through 7.5.18; 7.6.0 through 7.6.14; 8.0.0 through 8.0.20
CVE-2018-3155
7.7
4%
Oct 17
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser)
Affected: 5.7.0 through 5.7.23; 8.0.0 through 8.0.12
CVE-2018-2755
7.7
1%
Apr 19
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication)
Affected: 5.5.0 through 5.5.59; 5.6.0 through 5.6.39; 5.7.0 through 5.7.21
CVE-2017-3309
7.7
3%
Apr 24
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)
Affected: 5.5.0 through 5.5.54; 5.6.0 through 5.6.35; 5.7.0 through 5.7.17
CVE-2017-3308
7.7
3%
Apr 24
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML)
Affected: 5.5.0 through 5.5.54; 5.6.0 through 5.6.35; 5.7.0 through 5.7.17
CVE-2016-3440
7.7
3%
Jul 21
Unspecified vulnerability in Oracle MySQL 5.7.11 and earlier allows remote authenticated users to affect availability via vectors related to Server: Optimizer
Affected: through 5.7.11
CVE-2024-21272
7.5
1%
Oct 15
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Python)
Affected: 9.0.0
CVE-2020-11080
7.5
5%
Jun 3
In nghttp2 before version 1.41.0, the overly large HTTP/2 SETTINGS frame payload causes denial of service
Affected: 7.3.0 through 7.3.30; 7.4.0 through 7.4.29; 7.5.0 through 7.5.19; 7.6.0 through 7.6.15; 8.0.0 through 8.0.21
CVE-2020-1967
7.5
53%
Apr 21
Segmentation fault in SSL_check_chain
Affected: through 5.6.48; 5.7.0 through 5.7.30; 8.0.0 through 8.0.20
CVE-2020-11655
7.5
4%
Apr 9
SQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a malformed window-function query because the AggInfo object's initialization is…
Affected: 8.0.0 through 8.0.22
CVE-2020-5398
7.5
88%
Jan 16
RFD Attack via "Content-Disposition" Header Sourced from Request Input by Spring MVC or Spring WebFlux Application
Affected: 4.0.0 through 4.0.12; 8.0.0 through 8.0.20
CVE-2019-2822
7.5
3%
Jul 23
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Shell: Admin / InnoDB Cluster)
Affected: 8.0.0 through 8.0.16
CVE-2019-2632
7.5
4%
Apr 23
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Pluggable Auth)
Affected: 5.7.0 through 5.7.25; 8.0.0 through 8.0.15
CVE-2018-2696
7.5
5%
Jan 18
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Security : Privileges)
Affected: 5.6.0 through 5.6.38; 5.7.0 through 5.7.20
CVE-2017-10155
7.5
4%
Oct 19
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Pluggable Auth)
Affected: 5.6.0; 5.6.1; 5.6.2; 5.6.3; 5.6.4; 5.6.5; +34 more
CVE-2017-3599
7.5
90%
Apr 24
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Pluggable Auth)
Affected: 5.6.0 through 5.6.35; 5.7.0 through 5.7.17
CVE-2017-3450
7.5
4%
Apr 24
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Memcached)
Affected: 5.6.0 through 5.6.35; 5.7.0 through 5.7.17
CVE-2017-3329
7.5
4%
Apr 24
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Thread Pooling)
Affected: 5.5.0 through 5.5.54; 5.6.0 through 5.6.35; 5.7.0 through 5.7.17
CVE-2017-3302
7.5
5%
Feb 12
Crash in libmysqlclient.so in Oracle MySQL before 5.6.21 and 5.7.x before 5.7.5 and MariaDB through 5.5.54, 10.0.x through 10.0.29, 10.1.x through 10.1.21, and 10.2.x through…
Affected: 5.6.0 before 5.6.21; 5.7.0 before 5.7.5
CVE-2016-3471
7.5
0%
Jul 21
Unspecified vulnerability in Oracle MySQL 5.5.45 and earlier and 5.6.26 and earlier allows local users to affect confidentiality, integrity, and availability via vectors related…
Affected: 5.5.0 through 5.5.45; 5.6.0 through 5.6.26
CVE-2016-2105
7.5
40%
May 5
Integer overflow in the EVP_EncodeUpdate function in crypto/evp/encode.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service…
Affected: 5.6.0 through 5.6.30; 5.7.0 through 5.7.12
CVE-2022-21600
7.2
1%
Oct 18
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)
Affected: 8.0 through 8.0.27
CVE-2021-2144
7.2
2%
Apr 22
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser)
Affected: 5.7.0 through 5.7.29; 8.0.0 through 8.0.19
CVE-2020-14828
7.2
2%
Oct 21
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML)
Affected: 8.0.0 through 8.0.21
CVE-2020-14697
7.2
2%
Jul 15
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges)
Affected: 8.0.0 through 8.0.20
CVE-2020-14678
7.2
2%
Jul 15
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges)
Affected: 8.0.0 through 8.0.20
CVE-2020-14663
7.2
2%
Jul 15
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges)
Affected: 8.0.0 through 8.0.20
CVE-2023-21980
7.1
1%
Apr 18
Vulnerability in the MySQL Server product of Oracle MySQL (component: Client programs)
Affected: 5.0.0 through 5.7.41; 8.0.0 through 8.0.32
CVE-2022-21351
7.1
1%
Jan 19
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)
Affected: 8.0.0 through 8.0.27
CVE-2022-21278
7.1
1%
Jan 19
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)
Affected: 8.0.0 through 8.0.26
CVE-2021-35610
7.1
2%
Oct 20
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)
Affected: 8.0.0 through 8.0.26
CVE-2019-2800
7.1
2%
Jul 23
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication)
Affected: 8.0.0 through 8.0.16
CVE-2019-2534
7.1
2%
Jan 16
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication)
Affected: 5.6.0 through 5.6.42; 5.7.0 through 5.7.24; 8.0.0 through 8.0.13
CVE-2018-3064
7.1
3%
Jul 18
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB)
Affected: 5.6.0 through 5.6.40; 5.7.0 through 5.7.22; 8.0.0 through 8.0.11
CVE-2018-2562
7.1
3%
Jan 18
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Partition)
Affected: 5.5.0 through 5.5.58; 5.6.0 through 5.6.38; 5.7.0 through 5.7.19
CVE-2016-6664
7.0
3%
Dec 13
mysqld_safe in Oracle MySQL through 5.5.51, 5.6.x through 5.6.32, and 5.7.x through 5.7.14; MariaDB; Percona Server before 5.5.51-38.2, 5.6.x before 5.6.32-78-1, and 5.7.x before…
Affected: 5.5.0 through 5.5.51; 5.6.0 through 5.6.32; 5.7.0 through 5.7.14
CVE-2016-6663
7.0
4%
Dec 13
Race condition in Oracle MySQL before 5.5.52, 5.6.x before 5.6.33, 5.7.x before 5.7.15, and 8.x before 8.0.1; MariaDB before 5.5.52, 10.0.x before 10.0.28, and 10.1.x before…
Affected: 5.5.0 through 5.5.52; 5.6.0 through 5.6.33; 5.7.0 through 5.7.15; 8.0
CVE-2016-5625
7.0
0%
Oct 25
Unspecified vulnerability in Oracle MySQL 5.7.14 and earlier allows local users to affect confidentiality, integrity, and availability via vectors related to Server: Packaging
Affected: 5.7.0 through 5.7.14
Page 1 of 10 · 500 total
12…10
The 500 most important CVEs for this product (exploited first, then by severity)