MS
Product
Mysql Server
330
CVEs
0
On KEV
9.8
Max CVSS
12
New 30D
Severity mix
Critical 7High 23Medium 282Low 18
Watch
Add Mysql Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-21872 | 5.5 | Jan 18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: 8.0.0 through 8.0.29 |
| CVE-2023-21869 | 5.5 | Jan 18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: 8.0.0 through 8.0.31 |
| CVE-2022-21528 | 5.5 | Jul 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: through 8.0.29 |
| CVE-2022-21527 | 5.5 | Jul 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: through 8.0.29 |
| CVE-2022-21509 | 5.5 | Jul 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: through 8.0.29 |
| CVE-2022-21459 | 5.5 | Apr 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: 8.0.0 through 8.0.28 |
| CVE-2022-21440 | 5.5 | Apr 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: 8.0.0 through 8.0.28 |
| CVE-2021-35604 | 5.5 | Oct 20 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: 5.7.0 through 5.7.35; 8.0.0 through 8.0.26 |
| CVE-2025-21540 | 5.4 | Jan 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges) Affected: 8.0.0 through 8.0.40; 8.4.0 through 8.4.3; 9.0.0 through 9.1.0 |
| CVE-2026-21929 | 5.3 | Jan 20 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser) Affected: 9.0.0 through 9.5.0 |
| CVE-2024-21176 | 5.3 | Jul 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling) Affected: through 8.4.0 |
| CVE-2024-20994 | 5.3 | Apr 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema) Affected: 8.0.0 through 8.0.36; 8.3.0 |
| CVE-2024-20964 | 5.3 | Feb 17 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges) Affected: 8.0.0 through 8.0.35; 8.1.0 through 8.2.0 |
| CVE-2021-44532 | 5.3 | Feb 24 | Node.js < 12.22.9, < 14.18.3, < 16.13.2, and < 17.3.1 converts SANs (Subject Alternative Names) to a string format Affected: through 5.7.37; 8.0.0 through 8.0.28 |
| CVE-2021-44533 | 5.3 | Feb 24 | Node.js < 12.22.9, < 14.18.3, < 16.13.2, and < 17.3.1 did not handle multi-value Relative Distinguished Names correctly Affected: through 5.7.37; 8.0.0 through 8.0.28 |
| CVE-2021-22923 | 5.3 | Aug 5 | When curl is instructed to get content using the metalink feature, and a user name and password are used to download the metalink XML file, those same credentials are then… Affected: 5.7.0 through 5.7.35; 8.0.0 through 8.0.26 |
| CVE-2021-22925 | 5.3 | Aug 5 | curl supports the `-t` command line option, known as `CURLOPT_TELNETOPTIONS`in libcurl Affected: 5.7.0 through 5.7.35; 8.0.0 through 8.0.26 |
| CVE-2021-22897 | 5.3 | Jun 11 | curl 7.61.0 through 7.76.1 suffers from exposure of data element to wrong session due to a mistake in the code for CURLOPT_SSL_CIPHER_LIST when libcurl is built to use the… Affected: through 5.7.34; 8.0.0 through 8.0.25 |
| CVE-2022-21539 | 5.0 | Jul 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: through 8.0.29 |
| CVE-2022-21418 | 5.0 | Apr 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: 8.0.0 through 8.0.28 |
| CVE-2021-2385 | 5.0 | Jul 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication) Affected: 5.7.0 through 5.7.34; 8.0.0 through 8.0.25 |
| CVE-2026-101751 | 4.9 | Oct 20 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication GCS) Affected: 8.4.0 through 8.4.12; 9.7.0 through 9.7.3; 26.7.0 through 26.7.1 |
| CVE-2026-101750 | 4.9 | Oct 20 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Clone Plugin) Affected: 8.4.0 through 8.4.12; 9.7.0 through 9.7.3; 26.7.0 through 26.7.1 |
| CVE-2026-101749 | 4.9 | Oct 20 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Security: Encryption) Affected: 26.7.0 through 26.7.1 |
| CVE-2026-101732 | 4.9 | Oct 20 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer) Affected: 8.4.0 through 8.4.12; 9.7.0 through 9.7.3; 26.7.0 through 26.7.1 |
| CVE-2026-101731 | 4.9 | Oct 20 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer) Affected: 8.4.0 through 8.4.12; 9.7.0 through 9.7.3; 26.7.0 through 26.7.1 |
| CVE-2026-61144 | 4.9 | Jul 21 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer) Affected: 9.7.0; 9.7.1 |
| CVE-2026-61128 | 4.9 | Jul 21 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer) Affected: 9.7.0; 9.7.1 |
| CVE-2026-60195 | 4.9 | Jul 21 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: JSON Duality) Affected: 9.7.0; 9.7.1 |
| CVE-2026-60194 | 4.9 | Jul 21 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: JSON Duality) Affected: 9.7.0; 9.7.1 |
| CVE-2026-60145 | 4.9 | Jul 21 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer) Affected: 8.4.0 through 8.4.10; 9.7.0; 9.7.1 |
| CVE-2026-47052 | 4.9 | Jul 21 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB) Affected: 8.4.0 through 8.4.10; 9.7.0; 9.7.1 |
| CVE-2026-47023 | 4.9 | Jul 21 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication) Affected: 8.4.0 through 8.4.10; 9.7.0; 9.7.1 |
| CVE-2026-47008 | 4.9 | Jul 21 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB) Affected: 9.7.0; 9.7.1 |
| CVE-2026-35240 | 4.9 | Apr 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: 8.0.0 through 8.0.45; 8.4.0 through 8.4.8; 9.0.0 through 9.6.0 |
| CVE-2026-35239 | 4.9 | Apr 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML) Affected: 8.0.0 through 8.0.45; 8.4.0 through 8.4.8; 9.0.0 through 9.6.0 |
| CVE-2026-35238 | 4.9 | Apr 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: 8.0.0 through 8.0.45; 8.4.0 through 8.4.8; 9.0.0 through 9.6.0 |
| CVE-2026-35237 | 4.9 | Apr 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: 8.0.0 through 8.0.45; 8.4.0 through 8.4.8; 9.0.0 through 9.6.0 |
| CVE-2026-35236 | 4.9 | Apr 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: 8.0.0 through 8.0.45; 8.4.0 through 8.4.8; 9.0.0 through 9.6.0 |
| CVE-2026-35235 | 4.9 | Apr 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: GIS) Affected: 9.0.0 through 9.6.0 |
| CVE-2026-35234 | 4.9 | Apr 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Partition) Affected: 9.0.0 through 9.6.0 |
| CVE-2026-34304 | 4.9 | Apr 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: 8.0.0 through 8.0.45; 8.4.0 through 8.4.8; 9.0.0 through 9.6.0 |
| CVE-2026-34293 | 4.9 | Apr 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML) Affected: 8.0.0 through 8.0.45 |
| CVE-2026-34278 | 4.9 | Apr 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: 8.0.0 through 8.0.45 |
| CVE-2026-34267 | 4.9 | Apr 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: 8.0.0 through 8.0.45 |
| CVE-2026-22005 | 4.9 | Apr 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: 8.0.0 through 8.0.45; 8.4.0 through 8.4.8; 9.0.0 through 9.6.0 |
| CVE-2026-22004 | 4.9 | Apr 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: 8.0.0 through 8.0.45; 8.4.0 through 8.4.8; 9.0.0 through 9.6.0 |
| CVE-2026-22002 | 4.9 | Apr 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: 8.0.0 through 8.0.45; 8.4.0 through 8.4.8; 9.0.0 through 9.6.0 |
| CVE-2026-21998 | 4.9 | Apr 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: 8.0.0 through 8.0.45; 8.4.0 through 8.4.8; 9.0.0 through 9.6.0 |
| CVE-2026-21952 | 4.9 | Jan 20 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser) Affected: 9.0.0 through 9.5.0 |