MA
Product
MariaDB
435
CVEs
0
On KEV
9.9
Max CVSS
15
New 30D
Severity mix
Critical 11High 72Medium 165Low 9
Watch
Add MariaDB to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-85748 | 9.9 | Oct 16 | MariaDB: Use-after-free with a large number of SYS_REFCURSOR's Affected: 12.3.1 before 12.3.3; 13.0.1 |
| CVE-2026-85746 | 9.9 | Oct 16 | MariaDB: Out-of-bound buffer write on in `ST_AsText` of nested GeometryCollections Affected: 10.6.1 before 10.6.28; 10.11.1 before 10.11.19; 11.4.1 before 11.4.13; 11.8.1 before 11.8.9; 12.3.1 before 12.3.3; 13.0.1 |
| CVE-2026-92262 | 9.9 | Oct 16 | MariaDB: Numerous issues caused by historical #mysql50# tablename encoding bypass. Affected: 10.6.1 before 10.6.28; 10.11.1 before 10.11.19; 11.4.1 before 11.4.13; 11.8.1 before 11.8.9; 12.3.1 before 12.3.3; 13.0.1 |
| CVE-2026-32710 | 9.9 | Mar 20 | Heap-based Buffer Overflow in MariaDB Affected: 11.4.1 before 11.4.10; 11.8.1 before 11.8.6; 12.1.2 |
| CVE-2026-44170 | 9.8 | Jun 12 | MariaDB: Argument injection in CONNECT REST Xcurl on Windows via unsanitized URL Affected: 10.6.1 before 10.6.26; 10.11.1 before 10.11.17; 11.4.1 before 11.4.11; 11.8.1 before 11.8.7; 12.3.1 |
| CVE-2026-49261 | 9.8 | Jun 11 | MariaDB server has unsafe parameter handling in `wsrep_notify_cmd` Affected: 10.6.1 before 10.6.27; 10.11.1 before 10.11.18; 11.4.1 before 11.4.12; 11.8.1 before 11.8.8; 12.3.1 |
| CVE-2023-26785 | 9.8 | Oct 17 | MariaDB v10.5 was discovered to contain a remote code execution (RCE) vulnerability via UDF Code in a Shared Object File, followed by a "create function" statement Affected: 10.5.0 |
| CVE-2016-9843 | 9.8 | May 23 | The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation Affected: 5.5.0 before 5.5.62; 10.0.0 before 10.0.37; 10.1.0 before 10.1.37; 10.2.0 before 10.2.19; 10.3.0 before 10.3.11 |
| CVE-2016-6662 | 9.8 | Sep 20 | Oracle MySQL through 5.5.52, 5.6.x through 5.6.33, and 5.7.x through 5.7.15; MariaDB before 5.5.51, 10.0.x before 10.0.27, and 10.1.x before 10.1.17; and Percona Server before… Affected: 5.5.20 before 5.5.51; 10.0.0 before 10.0.27; 10.1.0 before 10.1.17 |
| CVE-2026-44172 | 9.1 | Jun 12 | MariaDB: mysql_real_escape_string() incorrectly handled big5 Affected: 3.3.18; 3.4.8 |
| CVE-2020-15180 | 9.0 | May 27 | A flaw was found in the mysql-wsrep component of mariadb Affected: 10.1.0 before 10.1.47; 10.2.0 before 10.2.34; 10.3.0 before 10.3.25; 10.4.0 before 10.4.15; 10.5.0 before 10.5.6 |
Showing 11