MA
Vendor
MariaDB
459
CVEs
0
On KEV
31
New 30D
Products
SE9.9
server
MariaDB
26 CVEs0 on KEV16 new
MA9.9
MariaDB
MariaDB
430 CVEs0 on KEV15 new
CO8.8
Connector/c
Mariadb
1 CVEs0 on KEV0 new
MA6.5
Maxscale
Mariadb
1 CVEs0 on KEV0 new
MC7.5
Model Context Protocol
Mariadb
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-86047 | SE server MariaDB | 7.7 | Oct 16 | MariaDB: Insufficient quoting in mariadb-dump and SHOW commands |
| CVE-2026-85745 | SE server MariaDB | 4.3 | Oct 16 | MariaDB: Out-of-bound buffer read on in `ST_Area` of a multipolygon. |
| CVE-2026-85748 | SE server MariaDB | 9.9 | Oct 16 | MariaDB: Use-after-free with a large number of SYS_REFCURSOR's |
| CVE-2026-85746 | SE server MariaDB | 9.9 | Oct 16 | MariaDB: Out-of-bound buffer write on in `ST_AsText` of nested GeometryCollections |
| CVE-2026-92262 | SE server MariaDB | 9.9 | Oct 16 | MariaDB: Numerous issues caused by historical #mysql50# tablename encoding bypass. |
| CVE-2026-97380 | SE server MariaDB | 8.8 | Oct 16 | MariaDB: GRANT PROXY with empty password incorrectly checks grantor's privileges |
| CVE-2026-85985 | SE server MariaDB | 5.4 | Oct 16 | MariaDB: Unauthorized file access via CONNECT engine UDFs |
| CVE-2026-107823 | SE server MariaDB | 7.2 | Oct 9 | MariaDB: privilege escalation via incorrect view frm parsing |
| CVE-2026-107822 | SE server MariaDB | 6.4 | Oct 9 | MariaDB: database privilege escalation via user / role name collision in the acl cache |
| CVE-2026-107821 | SE server MariaDB | 8.0 | Oct 9 | MariaDB: insufficient validation of binary frm data when opening a table |
| CVE-2026-107819 | SE server MariaDB | 5.9 | Oct 9 | MariaDB Connector/C: libmariadb allowed cleartext password leakage on TLS hostname verification failure |
| CVE-2026-107818 | SE server MariaDB | 8.4 | Oct 9 | MariaDB: environment injection via wsrep bootstrap in the mariadb.service file |
| CVE-2026-107817 | SE server MariaDB | 4.4 | Oct 9 | MariaDB: mysql_json plugin OOB reads |
| CVE-2026-107816 | SE server MariaDB | 6.4 | Oct 9 | MariaDB: `qc_info` plugin can do OOB reads if query contains \0 |
| CVE-2026-107815 | SE server MariaDB | 8.5 | Oct 9 | MariaDB: one byte OOB write in DOS tables of the CONNECT engine |
| CVE-2026-107814 | SE server MariaDB | 8.4 | Oct 9 | MariaDB: Insecure $HOME in MariaDB rpm packages |
| CVE-2026-48165 | SE server MariaDB | 7.2 | Jun 12 | MariaDB: unsafe usage of `wsrep_sst_receive_address` values on the joiner side |
| CVE-2026-48163 | SE server MariaDB | 7.2 | Jun 12 | MariaDB: wsrep SST unsafe parameter handling on the donor side (rsync) |
| CVE-2026-44173 | SE server MariaDB | 5.3 | Jun 12 | MariaDB: FILE privilege was not checked for subqueries in the FROM clause |
| CVE-2026-44172 | SE server MariaDB | 9.1 | Jun 12 | MariaDB: mysql_real_escape_string() incorrectly handled big5 |
| CVE-2026-44171 | SE server MariaDB | 7.8 | Jun 12 | MariaDB: path traversal in mbstream |
| CVE-2026-44169 | SE server MariaDB | 4.3 | Jun 12 | MariaDB: Authorization bypass in role-based routine-level privilege check exposes stored routine definitions |
| CVE-2026-44168 | SE server MariaDB | 8.0 | Jun 12 | MariaDB: wsrep SST unsafe parameter handling on the donor side |
| CVE-2026-44170 | SE server MariaDB | 9.8 | Jun 12 | MariaDB: Argument injection in CONNECT REST Xcurl on Windows via unsanitized URL |
| CVE-2026-49261 | SE server MariaDB | 9.8 | Jun 11 | MariaDB server has unsafe parameter handling in `wsrep_notify_cmd` |
| CVE-2026-35549 | MA MariaDB MariaDB | 6.5 | Apr 3 | An issue was discovered in MariaDB Server before 11.4.10, 11.5.x through 11.8.x before 11.8.6, and 12.x before 12.2.2 |
| CVE-2026-32710 | SE server MariaDB | 9.9 | Mar 20 | Heap-based Buffer Overflow in MariaDB |
| CVE-2026-3494 | MA Mariadb Mariadb | 4.3 | Mar 3 | MariaDB Server Audit Plugin Comment Handling Bypass |
| CVE-2025-56404 | MC Model Context Protocol Mariadb | 7.5 | Sep 10 | An issue was discovered in MariaDB MCP 0.1.0 allowing attackers to gain sensitive information via the SSE service as the SSE service lacks user validation |
| CVE-2024-27766 | MA Mariadb Mariadb | 5.7 | Oct 17 | An issue in MariaDB v.11.1 allows a remote attacker to execute arbitrary code via the lib_mysqludf_sys.so function |
| CVE-2023-39593 | MA Mariadb Mariadb | 5.6 | Oct 17 | Insecure permissions in the sys_exec function of MariaDB v10.5 allows authenticated attackers to execute arbitrary commands with elevated privileges |
| CVE-2023-26785 | MA Mariadb Mariadb | 9.8 | Oct 17 | MariaDB v10.5 was discovered to contain a remote code execution (RCE) vulnerability via UDF Code in a Shared Object File, followed by a "create function" statement |
| CVE-2023-22084 | MA Mariadb Mariadb | 4.9 | Oct 17 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) |
| CVE-2023-5157 | MA Mariadb Mariadb | 7.5 | Sep 27 | A vulnerability was found in MariaDB |
| CVE-2023-40354 | MA Maxscale Mariadb | 6.5 | Aug 14 | An issue was discovered in MariaDB MaxScale before 23.02.3 |
| CVE-2022-47015 | MA Mariadb Mariadb | 6.5 | Jan 20 | MariaDB Server before 10.3.34 thru 10.9.3 is vulnerable to Denial of Service |
| CVE-2022-21595 | MA Mariadb Mariadb | 4.4 | Oct 18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: C API) |
| CVE-2022-38791 | MA Mariadb Mariadb | 5.5 | Aug 27 | In MariaDB before 10.9.2, compress_write in extra/mariabackup/ds_compress.cc does not release data_mutex upon a stream write failure, which allows local users to trigger a… |
| CVE-2022-32091 | MA Mariadb Mariadb | 7.5 | Jul 1 | MariaDB v10.7 was discovered to contain an use-after-poison in in __interceptor_memset at /libsanitizer/sanitizer_common/sanitizer_common_interceptors.inc |
| CVE-2022-32089 | MA Mariadb Mariadb | 7.5 | Jul 1 | MariaDB v10.5 to v10.7 was discovered to contain a segmentation fault via the component st_select_lex_unit::exclude_level |
| CVE-2022-32088 | MA Mariadb Mariadb | 7.5 | Jul 1 | MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Exec_time_tracker::get_loops/Filesort_tracker::report_use/filesort |
| CVE-2022-32087 | MA Mariadb Mariadb | 7.5 | Jul 1 | MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Item_args::walk_args |
| CVE-2022-32086 | MA Mariadb Mariadb | 7.5 | Jul 1 | MariaDB v10.4 to v10.8 was discovered to contain a segmentation fault via the component Item_field::fix_outer_field |
| CVE-2022-32085 | MA Mariadb Mariadb | 7.5 | Jul 1 | MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Item_func_in::cleanup/Item::cleanup_processor |
| CVE-2022-32084 | MA Mariadb Mariadb | 7.5 | Jul 1 | MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component sub_select |
| CVE-2022-32083 | MA Mariadb Mariadb | 7.5 | Jul 1 | MariaDB v10.2 to v10.6.1 was discovered to contain a segmentation fault via the component Item_subselect::init_expr_cache_tracker |
| CVE-2022-32082 | MA Mariadb Mariadb | 7.5 | Jul 1 | MariaDB v10.5 to v10.7 was discovered to contain an assertion failure at table->get_ref_count() == 0 in dict0dict.cc |
| CVE-2022-32081 | MA Mariadb Mariadb | 7.5 | Jul 1 | MariaDB v10.4 to v10.7 was discovered to contain an use-after-poison in prepare_inplace_add_virtual at /storage/innobase/handler/handler0alter.cc |
| CVE-2022-31624 | MA Mariadb Mariadb | 5.5 | May 25 | MariaDB Server before 10.7 is vulnerable to Denial of Service |
| CVE-2022-31623 | MA Mariadb Mariadb | 5.5 | May 25 | MariaDB Server before 10.7 is vulnerable to Denial of Service |
| CVE-2022-31622 | MA Mariadb Mariadb | 5.5 | May 25 | MariaDB Server before 10.7 is vulnerable to Denial of Service |
| CVE-2022-31621 | MA Mariadb Mariadb | 5.5 | May 25 | MariaDB Server before 10.7 is vulnerable to Denial of Service |
| CVE-2022-21451 | MA Mariadb Mariadb | 4.4 | Apr 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) |
| CVE-2022-21427 | MA Mariadb Mariadb | 4.9 | Apr 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS) |
| CVE-2022-27457 | MA Mariadb Mariadb | 7.5 | Apr 14 | MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component my_mb_wc_latin1 at /strings/ctype-latin1.c |
| CVE-2022-27456 | MA Mariadb Mariadb | 7.5 | Apr 14 | MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component VDec::VDec at /sql/sql_type.cc |
| CVE-2022-27455 | MA Mariadb Mariadb | 7.5 | Apr 14 | MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component my_wildcmp_8bit_impl at /strings/ctype-simple.c |
| CVE-2022-27452 | MA Mariadb Mariadb | 7.5 | Apr 14 | MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/item_cmpfunc.cc |
| CVE-2022-27451 | MA Mariadb Mariadb | 7.5 | Apr 14 | MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/field_conv.cc |
| CVE-2022-27449 | MA Mariadb Mariadb | 7.5 | Apr 14 | MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/item_func.cc:148 |