Login Request a demo
MY
Database
MySQL
by Oracle · last CVE Apr 21, 2026
1,328
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities1,328In the news1Timeline
Severity mix
Critical 7High 43Medium 450Low 0
Severity
All severities500Critical7High43Medium450Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add MySQL to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-2993
5.3
2%
Oct 16
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: C API)
Affected: 5.7.0 through 5.7.27; 8.0.0 through 8.0.17
CVE-2019-2924
5.3
2%
Oct 16
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption)
Affected: 5.6.0 through 5.6.45; 5.7.0 through 5.7.27
CVE-2019-2923
5.3
2%
Oct 16
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption)
Affected: 5.6.0 through 5.6.45; 5.7.0 through 5.7.27
CVE-2019-2922
5.3
2%
Oct 16
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption)
Affected: 5.6.0 through 5.6.45; 5.7.0 through 5.7.27
CVE-2019-2920
5.3
2%
Oct 16
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC)
Affected: 5.3.0 through 5.3.13; 8.0.0 through 8.0.17
CVE-2019-2743
5.3
2%
Jul 23
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Roles)
Affected: 8.0.0 through 8.0.12
CVE-2019-2741
5.3
2%
Jul 23
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Audit Log)
Affected: 5.0.0 through 5.7.26; 8.0.0 through 8.0.16
CVE-2019-2623
5.3
2%
Apr 23
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Options)
Affected: 8.0.0 through 8.0.15
CVE-2019-7317
5.3
9%
Feb 4
png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute
Affected: before 8.0.23
CVE-2018-3174
5.3
1%
Oct 17
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs)
Affected: 5.5.0 through 5.5.61; 5.6.0 through 5.6.41; 5.7.0 through 5.7.23; 8.0.0 through 8.0.12
CVE-2018-3074
5.3
2%
Jul 18
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Roles)
Affected: 8.0.0 through 8.0.11
CVE-2018-3062
5.3
3%
Jul 18
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Memcached)
Affected: 5.6.0 through 5.6.40; 5.7.0 through 5.7.22; 8.0.0 through 8.0.11
CVE-2017-10283
5.3
2%
Oct 19
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Performance Schema)
Affected: 5.6.0; 5.6.1; 5.6.2; 5.6.3; 5.6.4; 5.6.5; +34 more
CVE-2017-3637
5.3
2%
Aug 8
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: X Plugin)
Affected: through 5.7.18
CVE-2017-3636
5.3
0%
Aug 8
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs)
Affected: 5.5.0 through 5.5.56; 5.6.0 through 5.6.36
CVE-2017-3635
5.3
2%
Aug 8
Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/C)
Affected: 5.5.0 through 5.5.56; 5.6.0 through 5.6.36; 5.7.0 through 5.7.18
CVE-2017-3529
5.3
2%
Aug 8
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: UDF)
Affected: through 5.7.18
CVE-2017-3305
5.3
1%
Apr 24
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: C API)
Affected: 5.5.0 through 5.5.55; 5.6.0 through 5.6.35
CVE-2016-3615
5.3
6%
Jul 21
Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before…
Affected: 5.5.0 through 5.5.49; 5.6.0 through 5.6.30; 5.7.0 through 5.7.12
CVE-2016-3614
5.3
2%
Jul 21
Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier allows remote authenticated users to affect availability via vectors related to Server:…
Affected: 5.6.0 through 5.6.30; 5.7.0 through 5.7.12
CVE-2019-2739
5.1
1%
Jul 23
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges)
Affected: 5.6.0 through 5.6.44; 5.7.0 through 5.7.26; 8.0.0 through 8.0.16
CVE-2019-2634
5.1
0%
Apr 23
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication)
Affected: 8.0.0 through 8.0.15
CVE-2016-0641
5.1
2%
Apr 21
Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x before…
Affected: 5.5.0 through 5.5.47; 5.6.0 through 5.6.28; 5.7.0 through 5.7.10
CVE-2026-34319
5.0
0%
Apr 21
Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client)
Affected: 8.0.0 through 8.0.45; 8.4.0 through 8.4.8; 9.0.0 through 9.6.0
CVE-2026-34317
5.0
0%
Apr 21
Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client)
Affected: 8.0.0 through 8.0.45; 8.4.0 through 8.4.8; 9.0.0 through 9.6.0
CVE-2021-35602
5.0
2%
Oct 20
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Options)
Affected: 8.0.0 through 8.0.26
CVE-2021-2048
5.0
2%
Jan 20
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB)
Affected: 8.0.0 through 8.0.22
CVE-2019-2536
5.0
0%
Jan 16
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging)
Affected: 8.0.0 through 8.0.13
CVE-2018-3171
5.0
2%
Oct 17
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Partition)
Affected: 5.7.0 through 5.7.23; 8.0.0 through 8.0.12
CVE-2018-3081
5.0
3%
Jul 18
Vulnerability in the MySQL Client component of Oracle MySQL (subcomponent: Client programs)
Affected: 5.5.0 through 5.5.60; 5.6.0 through 5.6.40; 5.7.0 through 5.7.22; 8.0.0 through 8.0.11
CVE-2026-21964
4.9
0%
Jan 20
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling)
Affected: 8.0.0 through 8.0.44; 8.4.0 through 8.4.7; 9.0.0 through 9.5.0
CVE-2025-50102
4.9
1%
Jul 15
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)
Affected: 8.0.0 through 8.0.42; 8.4.0 through 8.4.5; 9.0.0 through 9.3.0
CVE-2025-50101
4.9
1%
Jul 15
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)
Affected: 8.0.0 through 8.0.42; 8.4.0 through 8.4.5; 9.0.0 through 9.3.0
CVE-2025-50099
4.9
1%
Jul 15
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB)
Affected: 8.0.0 through 8.0.42; 8.4.0 through 8.4.5; 9.0.0 through 9.3.0
CVE-2025-50097
4.9
1%
Jul 15
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption)
Affected: 8.0.0 through 8.0.42; 8.4.0 through 8.4.5; 9.0.0 through 9.3.0
CVE-2025-50095
4.9
1%
Jul 15
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)
Affected: 9.0.0 through 9.3.0
CVE-2025-50094
4.9
1%
Jul 15
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL)
Affected: 8.0.42; 8.4.5; 9.3.0
CVE-2025-50093
4.9
1%
Jul 15
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL)
Affected: 8.0.0 through 8.0.42; 8.4.0 through 8.4.5; 9.0.0 through 9.3.0
CVE-2025-50092
4.9
1%
Jul 15
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB)
Affected: 8.0.0 through 8.0.42; 8.4.0 through 8.4.5; 9.0.0 through 9.3.0
CVE-2025-50091
4.9
1%
Jul 15
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)
Affected: 8.0.0 through 8.0.42; 8.4.0 through 8.4.5; 9.0.0 through 9.3.0
CVE-2025-50089
4.9
1%
Jul 15
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)
Affected: 9.0.0 through 9.1.0
CVE-2025-50088
4.9
1%
Jul 15
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB)
Affected: 8.0.0 through 8.0.41; 8.4.0 through 8.4.4; 9.0.0 through 9.2.0
CVE-2025-50087
4.9
1%
Jul 15
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)
Affected: 8.0.0 through 8.0.42; 8.4.0 through 8.4.5; 9.0.0 through 9.3.0
CVE-2025-50086
4.9
1%
Jul 15
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services)
Affected: 8.0.0 through 8.0.42; 8.4.0 through 8.4.5; 9.0.0 through 9.3.0
CVE-2025-50084
4.9
1%
Jul 15
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)
Affected: 8.0.0 through 8.0.42; 8.4.0 through 8.4.5; 9.0.0 through 9.3.0
CVE-2025-50080
4.9
1%
Jul 15
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure)
Affected: 8.0.0 through 8.0.42; 8.4.0 through 8.4.5; 9.0.0 through 9.3.0
CVE-2025-50079
4.9
1%
Jul 15
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)
Affected: 8.0.0 through 8.0.42; 8.4.0 through 8.4.5; 9.0.0 through 9.3.0
CVE-2025-50077
4.9
1%
Jul 15
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB)
Affected: 8.0.0 through 8.0.42; 8.4.0 through 8.4.5; 9.0.0 through 9.3.0
CVE-2024-21241
4.9
1%
Oct 15
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)
Affected: 8.0.0 through 8.0.39; 8.4.0 through 8.4.2; 9.0.0; 9.0.1
CVE-2024-21239
4.9
1%
Oct 15
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB)
Affected: 8.0.0 through 8.0.39; 8.4.0 through 8.4.2; 9.0.0; 9.0.1
Page 6 of 9 · 450 total
1…567…9
The 500 most important CVEs for this product (exploited first, then by severity)