MariaDB vulnerabilities
The newest vulnerabilities affecting MariaDB, up to 200. Subscribe by RSS.
- CVE-2026-86047MariaDB: Insufficient quoting in mariadb-dump and SHOW commandsMariaDB server · mariadb +2
- CVE-2026-85745MariaDB: Out-of-bound buffer read on in `ST_Area` of a multipolygon.MariaDB server · mariadb +2
- CVE-2026-85748MariaDB: Use-after-free with a large number of SYS_REFCURSOR'sMariaDB server · mariadb +2
- CVE-2026-85746MariaDB: Out-of-bound buffer write on in `ST_AsText` of nested GeometryCollectionsMariaDB server · mariadb +2
- CVE-2026-92262MariaDB: Numerous issues caused by historical #mysql50# tablename encoding bypass.MariaDB server · mariadb +2
- CVE-2026-97380MariaDB: GRANT PROXY with empty password incorrectly checks grantor's privilegesMariaDB server · mariadb +2
- CVE-2026-85985MariaDB: Unauthorized file access via CONNECT engine UDFsMariaDB server · mariadb +2
- CVE-2026-107823MariaDB: privilege escalation via incorrect view frm parsingMariaDB server · mariadb +2
- CVE-2026-107822MariaDB: database privilege escalation via user / role name collision in the acl cacheMariaDB server · mariadb +2
- CVE-2026-107821MariaDB: insufficient validation of binary frm data when opening a tableMariaDB server · mariadb +2
- CVE-2026-107819MariaDB Connector/C: libmariadb allowed cleartext password leakage on TLS hostname verification failureMariaDB server
- CVE-2026-107818MariaDB: environment injection via wsrep bootstrap in the mariadb.service fileMariaDB server · mariadb +2
- CVE-2026-107817MariaDB: mysql_json plugin OOB readsMariaDB server · mariadb +2
- CVE-2026-107816MariaDB: `qc_info` plugin can do OOB reads if query contains \0MariaDB server · mariadb +2
- CVE-2026-107815MariaDB: one byte OOB write in DOS tables of the CONNECT engineMariaDB server · mariadb +2
- CVE-2026-107814MariaDB: Insecure $HOME in MariaDB rpm packagesMariaDB server · mariadb +2
- CVE-2026-48165MariaDB: unsafe usage of `wsrep_sst_receive_address` values on the joiner sideMariaDB server
- CVE-2026-48163MariaDB: wsrep SST unsafe parameter handling on the donor side (rsync)MariaDB server
- CVE-2026-44173MariaDB: FILE privilege was not checked for subqueries in the FROM clauseMariaDB server
- CVE-2026-44172MariaDB: mysql_real_escape_string() incorrectly handled big5MariaDB server · mariadb
- CVE-2026-44171MariaDB: path traversal in mbstreamMariaDB server
- CVE-2026-44169MariaDB: Authorization bypass in role-based routine-level privilege check exposes stored routine definitionsMariaDB server
- CVE-2026-44168MariaDB: wsrep SST unsafe parameter handling on the donor sideMariaDB server
- CVE-2026-44170MariaDB: Argument injection in CONNECT REST Xcurl on Windows via unsanitized URLMariaDB server
- CVE-2026-49261MariaDB server has unsafe parameter handling in `wsrep_notify_cmd`MariaDB server
- CVE-2026-35549An issue was discovered in MariaDB Server before 11.4.10, 11.5.x through 11.8.x before 11.8.6, and 12.x before 12.2.2.MariaDB
- CVE-2026-32710Heap-based Buffer Overflow in MariaDBMariaDB server
- CVE-2026-3494MariaDB Server Audit Plugin Comment Handling BypassMariaDB Foundation MariaDB Server · Amazon Aurora MySQL +5
- CVE-2025-13699MariaDB mariadb-dump Utility Directory Traversal Remote Code Execution VulnerabilityMariaDB
- CVE-2023-52968MariaDB Server 10.4 before 10.4.33, 10.5 before 10.5.24, 10.6 before 10.6.17, 10.7 through 10.11 before 10.11.7, 11.0 before 11.0.5, and 11.MariaDB
- CVE-2023-52969MariaDB Server 10.4 through 10.5.*, 10.6 through 10.6.*, 10.7 through 10.11.*, and 11.0 through 11.0.* can sometimes crash with an empty bacMariaDB
- CVE-2023-52970MariaDB Server 10.4 through 10.5.*, 10.6 through 10.6.*, 10.7 through 10.11.*, 11.0 through 11.0.*, and 11.1 through 11.4.* crashes in Item_MariaDB
- CVE-2023-52971MariaDB Server 10.10 through 10.11.* and 11.0 through 11.4.* crashes in JOIN::fix_all_splittings_in_plan.MariaDB
- CVE-2022-24052MariaDB CONNECT Storage Engine Heap-based Buffer Overflow Privilege Escalation Vulnerability.MariaDB
- CVE-2022-24051MariaDB CONNECT Storage Engine Format String Privilege Escalation Vulnerability.MariaDB
- CVE-2022-24050MariaDB CONNECT Storage Engine Use-After-Free Privilege Escalation Vulnerability.MariaDB
- CVE-2022-24048MariaDB CONNECT Storage Engine Stack-based Buffer Overflow Privilege Escalation Vulnerability.MariaDB
- CVE-2020-15180A flaw was found in the mysql-wsrep component of mariadb.mariadb