MS
Product
MySQL Server
356
CVEs
0
On KEV
9.8
Max CVSS
12
New 30D
Severity mix
Critical 7High 23Medium 303Low 23
Watch
Add MySQL Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-21546 | 3.8 | Jan 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges) Affected: through 8.0.40; through 8.4.3; through 9.1.0 |
| CVE-2024-21000 | 3.8 | Apr 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges) Affected: 8.0.0 through 8.0.36; 8.3.0 |
| CVE-2021-22924 | 3.7 | Aug 5 | libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse, if one of them matches the setup.Due to errors in the logic, the config matching… Affected: 5.7.0 through 5.7.36; 8.0.0 through 8.0.26 |
| CVE-2024-21231 | 3.1 | Oct 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Client programs) Affected: through 8.0.39; through 8.4.2; through 9.0.1 |
| CVE-2023-22048 | 3.1 | Jul 18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Pluggable Auth) Affected: 8.0.0 through 8.0.33 |
| CVE-2022-21538 | 3.1 | Jul 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption) Affected: through 8.0.29 |
| CVE-2021-22898 | 3.1 | Jun 11 | curl 7.7 through 7.76.1 suffers from an information disclosure when the `-t` command line option, known as `CURLOPT_TELNETOPTIONS` in libcurl, is used to send variable=content… Affected: before 5.7.34; 8.0.15 before 8.0.25 |
| CVE-2026-61096 | 2.9 | Jul 21 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Pluggable Auth) Affected: 8.4.0 through 8.4.10; 9.7.0; 9.7.1 |
| CVE-2026-61081 | 2.7 | Jul 21 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Performance Schema) Affected: 8.4.0 through 8.4.10; 9.7.0; 9.7.1 |
| CVE-2026-22001 | 2.7 | Apr 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema) Affected: 8.0.0 through 8.0.45; 8.4.0 through 8.4.8; 9.0.0 through 9.6.0 |
| CVE-2026-21965 | 2.7 | Jan 20 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Pluggable Auth) Affected: 9.0.0 through 9.5.0 |
| CVE-2025-30703 | 2.7 | Apr 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: 8.0.0 through 8.0.41; 8.4.0 through 8.4.4; 9.0.0 through 9.2.0 |
| CVE-2025-30681 | 2.7 | Apr 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication) Affected: 8.0.0 through 8.0.41; 8.4.0 through 8.4.4; 9.0.0 through 9.2.0 |
| CVE-2023-22038 | 2.7 | Jul 18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges) Affected: 8.0.0 through 8.0.33 |
| CVE-2023-21963 | 2.7 | Apr 18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Connection Handling) Affected: 5.7.0 through 5.7.40; 8.0.0 through 8.0.31 |
| CVE-2023-21874 | 2.7 | Jan 18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling) Affected: 8.0.0 through 8.0.30 |
| CVE-2022-21423 | 2.7 | Apr 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: 8.0.0 through 8.0.28 |
| CVE-2026-60190 | 2.2 | Jul 21 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication) Affected: 8.4.0 through 8.4.10; 9.7.0; 9.7.1 |
| CVE-2024-21244 | 2.2 | Oct 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Telemetry) Affected: through 8.4.2; through 9.0.1 |
| CVE-2024-21243 | 2.2 | Oct 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Telemetry) Affected: through 8.4.2; through 9.0.1 |
| CVE-2024-21237 | 2.2 | Oct 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication GCS) Affected: through 8.0.39; through 8.4.2; through 9.0.1 |
| CVE-2024-21232 | 2.2 | Oct 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services) Affected: through 8.4.2; through 9.0.1 |
| CVE-2025-21520 | 1.8 | Jan 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Options) Affected: through 8.0.40; through 8.4.3; through 9.1.0 |
Showing 23