Login Request a demo
MA
Product
MariaDB
by MariaDB · last CVE Oct 16, 2026
435
CVEs
0
On KEV
9.9
Max CVSS
15
New 30D
Vulnerabilities435In the news0Timeline
Severity mix
Critical 11High 72Medium 165Low 9
Severity
All severities435Critical11High72Medium165Low9
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add MariaDB to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-2817
6.5
3%
Apr 19
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL)
Affected: 5.5.0 before 5.5.60; 10.0.0 before 10.0.35; 10.1.0 before 10.1.33; 10.2.0 before 10.2.15
CVE-2018-2784
6.5
3%
Apr 19
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB)
Affected: 10.0.0 before 10.0.35; 10.1.0 before 10.1.33; 10.2.0 before 10.2.15
CVE-2018-2782
6.5
3%
Apr 19
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB)
Affected: 10.0.0 before 10.0.35; 10.1.0 before 10.1.33; 10.2.0 before 10.2.15
CVE-2018-2668
6.5
4%
Jan 18
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)
Affected: 5.5.0 before 5.5.59; 10.0.0 before 10.0.34; 10.1.0 before 10.1.31; 10.2.0 before 10.2.13
CVE-2018-2665
6.5
4%
Jan 18
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)
Affected: 5.5.0 before 5.5.59; 10.0.0 before 10.0.34; 10.1.0 before 10.1.31; 10.2.0 before 10.2.13
CVE-2018-2640
6.5
4%
Jan 18
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)
Affected: 5.5.0 before 5.5.59; 10.0.0 before 10.0.34; 10.1.0 before 10.1.31; 10.2.0 before 10.2.13
CVE-2018-2622
6.5
4%
Jan 18
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL)
Affected: 5.5.0 before 5.5.59; 10.0.0 before 10.0.34; 10.1.0 before 10.1.31; 10.2.0 before 10.2.13
CVE-2018-2612
6.5
4%
Jan 18
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB)
Affected: 10.0.0 before 10.0.34; 10.1.0 before 10.1.31; 10.2.0 before 10.2.13
CVE-2017-10384
6.5
3%
Oct 19
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL)
Affected: 5.5.0 before 5.5.57; 10.0.0 before 10.0.32; 10.1.0 before 10.1.26; 10.2.0 before 10.2.8
CVE-2017-10379
6.5
2%
Oct 19
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs)
Affected: 5.5.0 before 5.5.57; 10.0.0 before 10.0.32; 10.1.0 before 10.1.26; 10.2.0 before 10.2.8
CVE-2017-10378
6.5
3%
Oct 19
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)
Affected: 5.5.0 before 5.5.58; 10.0.0 before 10.0.33; 10.1.0 before 10.1.29; 10.2.0 before 10.2.10
CVE-2017-3453
6.5
3%
Apr 24
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)
Affected: 5.5.0 before 5.5.55; 10.0.0 before 10.0.31; 10.1.0 before 10.1.23; 10.2.0 before 10.2.6
CVE-2017-3258
6.5
3%
Jan 27
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL)
Affected: 5.5.0 before 5.5.54; 10.0.0 before 10.0.29; 10.1.0 before 10.1.21
CVE-2017-3257
6.5
3%
Jan 27
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB)
Affected: 10.0.0 before 10.0.29; 10.1.0 before 10.1.21; 10.2.0 before 10.2.8
CVE-2017-3244
6.5
4%
Jan 27
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML)
Affected: 5.5.0 before 5.5.54; 10.0.0 before 10.0.29; 10.1.0 before 10.1.21
CVE-2017-3238
6.5
5%
Jan 27
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)
Affected: 5.5.0 before 5.5.54; 10.0.0 before 10.0.29; 10.1.0 before 10.1.21
CVE-2016-5626
6.5
6%
Oct 25
Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via vectors…
Affected: 5.5.0 before 5.5.52; 10.0.0 before 10.0.28; 10.1.0 before 10.1.18
CVE-2016-5624
6.5
5%
Oct 25
Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier allows remote authenticated users to affect availability via vectors related to DML
Affected: 5.5.0 before 5.5.52; 10.0.0 before 10.0.28; 10.1.0 before 10.1.18
CVE-2016-5612
6.5
4%
Oct 25
Unspecified vulnerability in Oracle MySQL 5.5.50 and earlier, 5.6.31 and earlier, and 5.7.13 and earlier allows remote authenticated users to affect availability via vectors…
Affected: 5.5.0 before 5.5.51; 10.0.0 before 10.0.27
CVE-2016-3492
6.5
7%
Oct 25
Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via vectors…
Affected: 5.5.0 before 5.5.52; 10.0.0 before 10.0.28; 10.1.0 before 10.1.18
CVE-2016-3521
6.5
10%
Jul 21
Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before…
Affected: 5.5.20 before 5.5.50; 10.0.0 before 10.0.26; 10.1.0 before 10.1.15
CVE-2016-0502
6.5
3%
Jan 21
Unspecified vulnerability in Oracle MySQL 5.5.31 and earlier and 5.6.11 and earlier allows remote authenticated users to affect availability via unknown vectors related to…
Affected: 5.5.0 before 5.5.32; 10.0.0 before 10.0.4
CVE-2026-107822
6.4
1%
Oct 9
MariaDB: database privilege escalation via user / role name collision in the acl cache
Affected: 10.6.1 before 10.6.28; 10.11.1 before 10.11.19; 11.4.1 before 11.4.13; 11.8.1 before 11.8.9; 12.3.1 before 12.3.3; 13.0.1 before 13.0.2
CVE-2026-107816
6.4
0%
Oct 9
MariaDB: `qc_info` plugin can do OOB reads if query contains \0
Affected: 10.6.1 before 10.6.28; 10.11.1 before 10.11.19; 11.4.1 before 11.4.13; 11.8.1 before 11.8.9; 12.3.1 before 12.3.3; 13.0.1 before 13.0.2
CVE-2019-2503
6.4
3%
Jan 16
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Connection Handling)
Affected: 5.5.0 before 5.5.62; 10.0.0 before 10.0.37; 10.1.0 before 10.1.36; 10.2.0 before 10.2.18; 10.3.0 before 10.3.10
CVE-2017-3291
6.3
0%
Jan 27
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging)
Affected: 5.5.0 before 5.5.54; 10.0.0 before 10.0.29; 10.1.0 before 10.1.21
CVE-2016-0640
6.1
2%
Apr 21
Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x before…
Affected: 5.5.20 before 5.5.48; 10.0.0 before 10.0.24; 10.1.0 before 10.1.12
CVE-2021-2389
5.9
8%
Jul 21
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB)
Affected: 10.2.0 before 10.2.40; 10.3.0 before 10.3.31; 10.4.0 before 10.4.21; 10.5.0 before 10.5.12; 10.6.0 before 10.6.4
CVE-2021-2011
5.9
3%
Jan 20
Vulnerability in the MySQL Client product of Oracle MySQL (component: C API)
Affected: 5.5.0 before 5.5.61; 10.0.0 before 10.0.35; 10.1.0 before 10.1.33; 10.2.0 before 10.2.15
CVE-2020-2574
5.9
4%
Jan 15
Vulnerability in the MySQL Client product of Oracle MySQL (component: C API)
Affected: 5.5.0 before 5.5.67; 10.1.0 before 10.1.44; 10.2.0 before 10.2.31; 10.3.0 before 10.3.22; 10.4.0 before 10.4.12
CVE-2018-2761
5.9
4%
Apr 19
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs)
Affected: 5.5.0 before 5.5.60; 10.0.0 before 10.0.35; 10.1.0 before 10.1.33; 10.2.0 before 10.2.15
CVE-2015-3152
5.9
7%
May 16
Oracle MySQL before 5.7.3, Oracle MySQL Connector/C (aka libmysqlclient) before 6.1.3, and MariaDB before 5.5.44 use the --ssl option to mean that SSL is optional, which allows…
Affected: 5.5.0 before 5.5.44; 10.0.0 before 10.0.20
CVE-2016-2047
5.9
4%
Jan 27
The ssl_verify_server_cert function in sql-common/client.c in MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10; Oracle MySQL 5.5.48 and earlier, 5.6.29 and…
Affected: 5.5.20 before 5.5.47; 10.0.0 before 10.0.23; 10.1.0 before 10.1.10
CVE-2015-7744
5.9
5%
Jan 22
wolfSSL (formerly CyaSSL) before 3.6.8 does not properly handle faults associated with the Chinese Remainder Theorem (CRT) process when allowing ephemeral key exchange without low…
Affected: 5.5.0 before 5.5.46; 10.0.0 before 10.0.22; 10.1.0 before 10.1.9
CVE-2024-27766
5.7
1%
Oct 17
An issue in MariaDB v.11.1 allows a remote attacker to execute arbitrary code via the lib_mysqludf_sys.so function
Affected: 11.1.0
CVE-2023-39593
5.6
1%
Oct 17
Insecure permissions in the sys_exec function of MariaDB v10.5 allows authenticated attackers to execute arbitrary commands with elevated privileges
Affected: 10.5.0
CVE-2017-3265
5.6
1%
Jan 27
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging)
Affected: 5.5.0 before 5.5.54; 10.0.0 before 10.0.29; 10.1.0 before 10.1.21
CVE-2022-38791
5.5
0%
Aug 27
In MariaDB before 10.9.2, compress_write in extra/mariabackup/ds_compress.cc does not release data_mutex upon a stream write failure, which allows local users to trigger a…
Affected: 10.3.0 before 10.3.36; 10.4.0 before 10.4.26; 10.5.0 before 10.5.17; 10.6.0 before 10.6.9; 10.7.0 before 10.7.5; 10.8.0 before 10.8.4; +1 more
CVE-2022-31624
5.5
0%
May 25
MariaDB Server before 10.7 is vulnerable to Denial of Service
Affected: before 10.2.41; 10.3.0 before 10.3.32; 10.4.0 before 10.4.22; 10.5.0 before 10.5.13; 10.6.0 before 10.6.5
CVE-2022-31623
5.5
0%
May 25
MariaDB Server before 10.7 is vulnerable to Denial of Service
Affected: before 10.2.42; 10.3.0 before 10.3.33; 10.4.0 before 10.4.23; 10.5.0 before 10.5.14; 10.6.0 before 10.6.6; 10.7.0 before 10.7.2
CVE-2022-31622
5.5
0%
May 25
MariaDB Server before 10.7 is vulnerable to Denial of Service
Affected: before 10.2.42; 10.3.0 before 10.3.33; 10.4.0 before 10.4.23; 10.5.0 before 10.5.14; 10.6.0 before 10.6.6; 10.7.0 before 10.7.2
CVE-2022-31621
5.5
0%
May 25
MariaDB Server before 10.7 is vulnerable to Denial of Service
Affected: before 10.2.41; 10.3.0 before 10.3.32; 10.4.0 before 10.4.22; 10.5.0 before 10.5.13; 10.6.0 before 10.6.5
CVE-2021-46668
5.5
0%
Feb 1
MariaDB through 10.5.9 allows an application crash via certain long SELECT DISTINCT statements that improperly interact with storage-engine resource limitations for temporary data…
Affected: 10.2.0 before 10.2.43; 10.3.0 before 10.3.34; 10.4.0 before 10.4.24; 10.5.0 before 10.5.15; 10.6.0 before 10.6.7; 10.7.0 before 10.7.3
CVE-2021-46667
5.5
0%
Feb 1
MariaDB before 10.6.5 has a sql_lex.cc integer overflow, leading to an application crash
Affected: before 10.2.41; 10.3.0 before 10.3.32; 10.4.0 before 10.4.22; 10.5.0 before 10.5.13; 10.6.0 before 10.6.5
CVE-2021-46666
5.5
0%
Feb 1
MariaDB before 10.6.2 allows an application crash because of mishandling of a pushdown from a HAVING clause to a WHERE clause
Affected: before 10.2.39; 10.3.0 before 10.3.30; 10.4.0 before 10.4.20; 10.5.0 before 10.5.11; 10.6.0 before 10.6.2
CVE-2021-46665
5.5
0%
Feb 1
MariaDB through 10.5.9 allows a sql_parse.cc application crash because of incorrect used_tables expectations
Affected: 10.2.0 before 10.2.43; 10.3.0 before 10.3.34; 10.4.0 before 10.4.24; 10.5.0 before 10.5.15; 10.6.0 before 10.6.7; 10.7.0 before 10.7.3
CVE-2021-46664
5.5
0%
Feb 1
MariaDB through 10.5.9 allows an application crash in sub_select_postjoin_aggr for a NULL value of aggr
Affected: 10.2.0 before 10.2.43; 10.3.0 before 10.3.34; 10.4.0 before 10.4.24; 10.5.0 before 10.5.15; 10.6.0 before 10.6.7; 10.7.0 before 10.7.3
CVE-2021-46663
5.5
0%
Feb 1
MariaDB through 10.5.13 allows a ha_maria::extra application crash via certain SELECT statements
Affected: 10.2.41 before 10.2.43; 10.3.32 before 10.3.34; 10.4.22 before 10.4.24; 10.5.9 before 10.5.15; 10.6.0 before 10.6.7; 10.7.0 before 10.7.3
CVE-2021-46662
5.5
0%
Feb 1
MariaDB through 10.5.9 allows a set_var.cc application crash via certain uses of an UPDATE statement in conjunction with a nested subquery
Affected: 10.3.0 before 10.3.32; 10.4.0 before 10.4.22; 10.5.0 before 10.5.13; 10.6.0 before 10.6.5
CVE-2021-46661
5.5
0%
Feb 1
MariaDB through 10.5.9 allows an application crash in find_field_in_tables and find_order_in_list via an unused common table expression (CTE)
Affected: 10.2.0 before 10.2.43; 10.3.0 before 10.3.34; 10.4.0 before 10.4.24; 10.5.0 before 10.5.15; 10.6.0 before 10.6.7; 10.7.0 before 10.7.3
Page 3 of 9 · 435 total
1234…9