MS
Product
MySQL Server
356
CVEs
0
On KEV
9.8
Max CVSS
12
New 30D
Severity mix
Critical 7High 23Medium 303Low 23
Watch
Add MySQL Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-101752 | 4.4 | Oct 20 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Components Services) Affected: 9.7.0 through 9.7.3; 26.7.0 through 26.7.1 |
| CVE-2026-60189 | 4.4 | Jul 21 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication) Affected: 8.4.0 through 8.4.10; 9.7.0; 9.7.1 |
| CVE-2026-60188 | 4.4 | Jul 21 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication) Affected: 8.4.0 through 8.4.10; 9.7.0; 9.7.1 |
| CVE-2026-60187 | 4.4 | Jul 21 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication) Affected: 8.4.0 through 8.4.10; 9.7.0; 9.7.1 |
| CVE-2026-60186 | 4.4 | Jul 21 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication Plugin) Affected: 8.4.0 through 8.4.10; 9.7.0; 9.7.1 |
| CVE-2026-60185 | 4.4 | Jul 21 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication) Affected: 8.4.0 through 8.4.10; 9.7.0; 9.7.1 |
| CVE-2026-60184 | 4.4 | Jul 21 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication) Affected: 8.4.0 through 8.4.10; 9.7.0; 9.7.1 |
| CVE-2026-60182 | 4.4 | Jul 21 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Clone Plugin) Affected: 8.4.0 through 8.4.10; 9.7.0; 9.7.1 |
| CVE-2026-60177 | 4.4 | Jul 21 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Clone Plugin) Affected: 8.4.0 through 8.4.10; 9.7.0; 9.7.1 |
| CVE-2026-47012 | 4.4 | Jul 21 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer) Affected: 8.4.0 through 8.4.10; 9.7.0; 9.7.1 |
| CVE-2026-46936 | 4.4 | Jul 21 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: DDL) Affected: 8.4.0 through 8.4.10; 9.7.0; 9.7.1 |
| CVE-2025-30704 | 4.4 | Apr 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services) Affected: 8.0.0 through 8.0.41; 8.4.0 through 8.4.4; 9.0.0 through 9.2.0 |
| CVE-2025-21519 | 4.4 | Jan 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges) Affected: through 8.0.40; through 8.4.3; through 9.1.0 |
| CVE-2025-21493 | 4.4 | Jan 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges) Affected: through 8.4.3; through 9.1.0 |
| CVE-2024-21212 | 4.4 | Oct 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Health Monitor) Affected: through 8.0.39; 8.4.0 |
| CVE-2024-21013 | 4.4 | Apr 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: 8.0.0 through 8.0.36; 8.1.0 through 8.3.0 |
| CVE-2024-21008 | 4.4 | Apr 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: 8.0.0 through 8.0.36; 8.1.0 through 8.3.0 |
| CVE-2024-20984 | 4.4 | Feb 17 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server : Security : Firewall) Affected: 8.0.0 through 8.0.35; 8.2.0 |
| CVE-2024-20968 | 4.4 | Feb 17 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Options) Affected: 8.0.0 through 8.0.34; 8.1.0 |
| CVE-2023-22058 | 4.4 | Jul 18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL) Affected: 8.0.0 through 8.0.33 |
| CVE-2023-22033 | 4.4 | Jul 18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: 8.0.0 through 8.0.33 |
| CVE-2023-22005 | 4.4 | Jul 18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication) Affected: 8.0.0 through 8.0.33 |
| CVE-2023-21947 | 4.4 | Apr 18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services) Affected: 8.0.0 through 8.0.32 |
| CVE-2023-21940 | 4.4 | Apr 18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services) Affected: 8.0.0 through 8.0.32 |
| CVE-2022-21522 | 4.4 | Jul 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure) Affected: through 8.0.29 |
| CVE-2021-2372 | 4.4 | Jul 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: 5.7.0 through 5.7.34; 8.0.0 through 8.0.25 |
| CVE-2026-22015 | 4.3 | Apr 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema) Affected: 8.0.0 through 8.0.45; 8.4.0 through 8.4.8; 9.0.0 through 9.6.0 |
| CVE-2025-21567 | 4.3 | Jan 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges) Affected: through 9.1.0 |
| CVE-2024-21213 | 4.2 | Oct 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: through 8.0.39; through 8.4.2; through 9.0.1 |
| CVE-2026-60191 | 4.1 | Jul 21 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication) Affected: 8.4.0 through 8.4.10; 9.7.0; 9.7.1 |
| CVE-2025-21494 | 4.1 | Jan 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges) Affected: through 8.0.39; through 8.4.2; through 9.0.1 |
| CVE-2021-2374 | 4.1 | Jul 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: 8.0.0 through 8.0.25 |
| CVE-2025-30721 | 4.0 | Apr 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: UDF) Affected: 8.0.0 through 8.0.41; 8.4.0 through 8.4.4; 9.0.0 through 9.2.0 |
| CVE-2025-21546 | 3.8 | Jan 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges) Affected: through 8.0.40; through 8.4.3; through 9.1.0 |
| CVE-2024-21000 | 3.8 | Apr 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges) Affected: 8.0.0 through 8.0.36; 8.3.0 |
| CVE-2021-22924 | 3.7 | Aug 5 | libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse, if one of them matches the setup.Due to errors in the logic, the config matching… Affected: 5.7.0 through 5.7.36; 8.0.0 through 8.0.26 |
| CVE-2024-21231 | 3.1 | Oct 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Client programs) Affected: through 8.0.39; through 8.4.2; through 9.0.1 |
| CVE-2023-22048 | 3.1 | Jul 18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Pluggable Auth) Affected: 8.0.0 through 8.0.33 |
| CVE-2022-21538 | 3.1 | Jul 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption) Affected: through 8.0.29 |
| CVE-2021-22898 | 3.1 | Jun 11 | curl 7.7 through 7.76.1 suffers from an information disclosure when the `-t` command line option, known as `CURLOPT_TELNETOPTIONS` in libcurl, is used to send variable=content… Affected: before 5.7.34; 8.0.15 before 8.0.25 |
| CVE-2026-61096 | 2.9 | Jul 21 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Pluggable Auth) Affected: 8.4.0 through 8.4.10; 9.7.0; 9.7.1 |
| CVE-2026-61081 | 2.7 | Jul 21 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Performance Schema) Affected: 8.4.0 through 8.4.10; 9.7.0; 9.7.1 |
| CVE-2026-22001 | 2.7 | Apr 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema) Affected: 8.0.0 through 8.0.45; 8.4.0 through 8.4.8; 9.0.0 through 9.6.0 |
| CVE-2026-21965 | 2.7 | Jan 20 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Pluggable Auth) Affected: 9.0.0 through 9.5.0 |
| CVE-2025-30703 | 2.7 | Apr 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: 8.0.0 through 8.0.41; 8.4.0 through 8.4.4; 9.0.0 through 9.2.0 |
| CVE-2025-30681 | 2.7 | Apr 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication) Affected: 8.0.0 through 8.0.41; 8.4.0 through 8.4.4; 9.0.0 through 9.2.0 |
| CVE-2023-22038 | 2.7 | Jul 18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges) Affected: 8.0.0 through 8.0.33 |
| CVE-2023-21963 | 2.7 | Apr 18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Connection Handling) Affected: 5.7.0 through 5.7.40; 8.0.0 through 8.0.31 |
| CVE-2023-21874 | 2.7 | Jan 18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling) Affected: 8.0.0 through 8.0.30 |
| CVE-2022-21423 | 2.7 | Apr 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: 8.0.0 through 8.0.28 |
