MA
Product
MariaDB
435
CVEs
0
On KEV
9.9
Max CVSS
15
New 30D
Severity mix
Critical 11High 72Medium 165Low 9
Watch
Add MariaDB to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-3243 | 4.4 | Jan 27 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Charsets) Affected: 5.5.0 before 5.5.54; 10.0.0 before 10.0.29; 10.1.0 before 10.1.21 |
| CVE-2016-5584 | 4.4 | Oct 25 | Unspecified vulnerability in Oracle MySQL 5.5.52 and earlier, 5.6.33 and earlier, and 5.7.15 and earlier allows remote administrators to affect confidentiality via vectors related… Affected: 5.5.0 before 5.5.53; 10.0.0 before 10.0.28; 10.1.0 before 10.1.19 |
| CVE-2026-85745 | 4.3 | Oct 16 | MariaDB: Out-of-bound buffer read on in `ST_Area` of a multipolygon. Affected: 10.6.1 before 10.6.28; 10.11.1 before 10.11.19; 11.4.1 before 11.4.13; 11.8.1 before 11.8.9; 12.3.1 before 12.3.3; 13.0.1 |
| CVE-2026-44169 | 4.3 | Jun 12 | MariaDB: Authorization bypass in role-based routine-level privilege check exposes stored routine definitions Affected: 11.4.1 before 11.4.11; 11.8.1 before 11.8.7; 12.3.1 |
| CVE-2026-3494 | 4.3 | Mar 3 | MariaDB Server Audit Plugin Comment Handling Bypass Affected: through 10.6.24; 10.7.0 through 10.11.15; 11.0.0 through 11.4.9; 11.5.0 through 11.8.5 |
| CVE-2021-2032 | 4.3 | Jan 20 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Information Schema) Affected: 10.0.0 before 10.0.11 |
| CVE-2018-3058 | 4.3 | Jul 18 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: MyISAM) Affected: 5.5.0 before 5.5.61; 10.0.0 before 10.0.36; 10.1.0 before 10.1.35; 10.2.0 before 10.2.17; 10.3.0 before 10.3.9 |
| CVE-2018-2813 | 4.3 | Apr 19 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL) Affected: 5.5.0 before 5.5.60; 10.0.0 before 10.0.35; 10.1.0 before 10.1.33; 10.2.0 before 10.2.15 |
| CVE-2017-3651 | 4.3 | Aug 8 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client mysqldump) Affected: 5.5.0 before 5.5.53; 10.0.0 before 10.0.28; 10.1.0 before 10.1.19 |
| CVE-2017-3464 | 4.3 | Apr 24 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL) Affected: 5.5.0 before 5.5.55; 10.0.0 before 10.0.31; 10.1.0 before 10.1.23; 10.2.0 before 10.2.6 |
| CVE-2016-8283 | 4.3 | Oct 25 | Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via vectors… Affected: 5.5.20 before 5.5.52; 10.0.0 before 10.0.28; 10.1.0 before 10.1.38 |
| CVE-2017-10268 | 4.1 | Oct 19 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication) Affected: 5.5.0 before 5.5.58; 10.0.0 before 10.0.33; 10.1.0 before 10.1.29; 10.2.0 before 10.2.10 |
| CVE-2016-0668 | 4.1 | Apr 21 | Unspecified vulnerability in Oracle MySQL 5.6.28 and earlier and 5.7.10 and earlier and MariaDB 10.0.x before 10.0.24 and 10.1.x before 10.1.12 allows local users to affect… Affected: 10.0.0 before 10.0.24; 10.1.0 through 10.1.12 |
| CVE-2017-3318 | 4.0 | Jan 27 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Error Handling) Affected: 5.5.0 before 5.5.54; 10.0.0 before 10.0.29; 10.1.0 before 10.1.21 |
| CVE-2017-3317 | 4.0 | Jan 27 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Logging) Affected: 5.5.0 before 5.5.54; 10.0.0 before 10.0.29; 10.1.0 before 10.1.21 |
