MS
Product
Mysql Server
330
CVEs
0
On KEV
9.8
Max CVSS
12
New 30D
Severity mix
Critical 7High 23Medium 282Low 18
Watch
Add Mysql Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-34270 | 6.5 | Apr 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin) Affected: 8.0.0 through 8.0.45; 8.4.0 through 8.4.8; 9.0.0 through 9.6.0 |
| CVE-2026-22017 | 6.5 | Apr 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: 8.0.0 through 8.0.45; 8.4.0 through 8.4.8; 9.0.0 through 9.6.0 |
| CVE-2026-22009 | 6.5 | Apr 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: 8.0.0 through 8.0.45; 8.4.0 through 8.4.8; 9.0.0 through 9.6.0 |
| CVE-2026-21968 | 6.5 | Jan 20 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: 8.0.0 through 8.0.44; 8.4.0 through 8.4.7; 9.0.0 through 9.5.0 |
| CVE-2026-21950 | 6.5 | Jan 20 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: 9.0.0 through 9.5.0 |
| CVE-2026-21949 | 6.5 | Jan 20 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: 9.0.0 through 9.5.0 |
| CVE-2025-30688 | 6.5 | Apr 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: 8.0.0 through 8.0.41; 8.4.0 through 8.4.4; 9.0.0 through 9.2.0 |
| CVE-2025-30687 | 6.5 | Apr 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: 8.0.0 through 8.0.41; 8.4.0 through 8.4.4; 9.0.0 through 9.2.0 |
| CVE-2025-30682 | 6.5 | Apr 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: 8.0.0 through 8.0.41; 8.4.0 through 8.4.4; 9.0.0 through 9.2.0 |
| CVE-2025-21577 | 6.5 | Apr 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: 8.0.0 through 8.0.41; 8.4.0 through 8.4.4; 9.0.0 through 9.2.0 |
| CVE-2025-21575 | 6.5 | Apr 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser) Affected: 8.0.0 through 8.0.41; 8.4.0 through 8.4.4; 9.0.0 through 9.2.0 |
| CVE-2025-21574 | 6.5 | Apr 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser) Affected: 8.0.0 through 8.0.41; 8.4.0 through 8.4.4; 9.0.0 through 9.2.0 |
| CVE-2025-21566 | 6.5 | Jan 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: 9.0.0 through 9.1.0 |
| CVE-2025-21522 | 6.5 | Jan 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser) Affected: 8.0.0 through 8.0.40; 8.4.0 through 8.4.3; 9.0.0 through 9.1.0 |
| CVE-2025-21518 | 6.5 | Jan 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: 8.0.0 through 8.0.40; 8.4.0 through 8.4.3; 9.0.0 through 9.1.0 |
| CVE-2025-21501 | 6.5 | Jan 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: 8.0.0 through 8.0.40; 8.4.0 through 8.4.3; 9.0.0 through 9.1.0 |
| CVE-2025-21500 | 6.5 | Jan 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: 8.0.0 through 8.0.40; 8.4.0 through 8.4.3; 9.0.0 through 9.1.0 |
| CVE-2024-21177 | 6.5 | Jul 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: through 8.0.37; 8.1.0 through 8.4.0 |
| CVE-2024-20962 | 6.5 | Feb 17 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: 8.0.0 through 8.0.35; 8.1.0 through 8.2.0 |
| CVE-2024-20960 | 6.5 | Feb 17 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: RAPID) Affected: 8.0.0 through 8.0.35; 8.1.0 through 8.2.0 |
| CVE-2023-21946 | 6.5 | Apr 18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: 8.0.0 through 8.0.32 |
| CVE-2023-21868 | 6.5 | Jan 18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: 8.0.0 through 8.0.31 |
| CVE-2022-21569 | 6.5 | Jul 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: 8.0.0 through 8.0.29 |
| CVE-2022-21556 | 6.5 | Jul 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: 8.0.0 through 8.0.28 |
| CVE-2021-22922 | 6.5 | Aug 5 | When curl is instructed to download content using the metalink feature, thecontents is verified against a hash provided in the metalink XML file.The metalink XML file points out… Affected: 5.7.0 through 5.7.35; 8.0.0 through 8.0.26 |
| CVE-2026-60332 | 6.4 | Jul 21 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication GCS) Affected: 8.4.0 through 8.4.10; 9.7.0; 9.7.1 |
| CVE-2026-60331 | 6.4 | Jul 21 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication) Affected: 8.4.0 through 8.4.10; 9.7.0; 9.7.1 |
| CVE-2026-60183 | 6.4 | Jul 21 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Clone Plugin) Affected: 8.4.0 through 8.4.10; 9.7.0; 9.7.1 |
| CVE-2019-2897 | 6.4 | Oct 16 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Actions) Affected: 5.0.0 through 5.7.34; 8.0.0 through 8.0.25 |
| CVE-2022-21380 | 6.3 | Jan 19 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General) Affected: 7.4.0 through 7.4.34; 7.5.0 through 7.5.24; 7.6.0 through 7.6.20; 8.0.0 through 8.0.27 |
| CVE-2026-60747 | 6.2 | Jul 21 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication) Affected: 8.4.0 through 8.4.10; 9.7.0; 9.7.1 |
| CVE-2021-2417 | 6.0 | Jul 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: GIS) Affected: 8.0.0 through 8.0.25 |
| CVE-2023-22053 | 5.9 | Jul 18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Client programs) Affected: 5.0.0 through 5.7.42; 8.0.0 through 8.0.32 |
| CVE-2022-21457 | 5.9 | Apr 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PAM Auth Plugin) Affected: 8.0.0 through 8.0.28 |
| CVE-2021-22947 | 5.9 | Sep 29 | When curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data using STARTTLS to upgrade to TLS security, the server can respond and send back multiple… Affected: 5.7.0 through 5.7.35; 8.0.0 through 8.0.26 |
| CVE-2021-2429 | 5.9 | Jul 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: 8.0.0 through 8.0.25 |
| CVE-2021-2390 | 5.9 | Jul 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: 5.7.0 through 5.7.34; 8.0.0 through 8.0.25 |
| CVE-2021-2389 | 5.9 | Jul 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: 5.7.0 through 5.7.34; 8.0.0 through 8.0.25 |
| CVE-2021-3449 | 5.9 | Mar 25 | NULL pointer deref in signature_algorithms processing Affected: through 5.7.33; 8.0.15 through 8.0.23 |
| CVE-2021-23841 | 5.9 | Feb 16 | The OpenSSL public API function X509_issuer_and_serial_hash() attempts to create a unique hash value based on the issuer and serial number data contained within an X509… Affected: before 5.7.33; 8.0.15 before 8.0.23 |
| CVE-2020-1971 | 5.9 | Dec 8 | The X.509 GeneralName type is a generic type for representing different types of names Affected: through 5.7.32; 8.0.15 through 8.0.22 |
| CVE-2025-53054 | 5.5 | Oct 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: 8.0.0 through 8.0.42; 8.4.0 through 8.4.6; 9.0.0 through 9.4.0 |
| CVE-2025-53053 | 5.5 | Oct 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML) Affected: 8.0.0 through 8.0.42; 8.4.0 through 8.4.6; 9.0.0 through 9.4.0 |
| CVE-2025-30695 | 5.5 | Apr 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: 8.0.0 through 8.0.41; 8.4.0 through 8.4.4; 9.0.0 through 9.2.0 |
| CVE-2025-30693 | 5.5 | Apr 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: 8.0.0 through 8.0.41; 8.4.0 through 8.4.4; 9.0.0 through 9.2.0 |
| CVE-2025-21559 | 5.5 | Jan 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: 8.0.0 through 8.0.40; 8.4.0 through 8.4.3; 9.0.0 through 9.1.0 |
| CVE-2025-21555 | 5.5 | Jan 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: 8.0.0 through 8.0.40; 8.4.0 through 8.4.3; 9.0.0 through 9.1.0 |
| CVE-2025-21497 | 5.5 | Jan 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: 8.0.0 through 8.0.40; 8.4.0 through 8.4.3; 9.0.0 through 9.1.0 |
| CVE-2024-21015 | 5.5 | Apr 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML) Affected: 8.0.0 through 8.0.34; 8.1.0 through 8.3.0 |
| CVE-2023-21929 | 5.5 | Apr 18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL) Affected: 8.0.0 through 8.0.32 |
