# cve.now: MariaDB

The newest entries affecting MariaDB (up to 200). Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-86047](https://cve.now/CVE-2026-86047.md): MariaDB: Insufficient quoting in mariadb-dump and SHOW commands (CVSS 7.7, MariaDB server · mariadb +2)
- [CVE-2026-85745](https://cve.now/CVE-2026-85745.md): MariaDB: Out-of-bound buffer read on in \`ST\_Area\` of a multipolygon. (CVSS 4.3, MariaDB server · mariadb +2)
- [CVE-2026-85748](https://cve.now/CVE-2026-85748.md): MariaDB: Use-after-free with a large number of SYS\_REFCURSOR's (CVSS 9.9, MariaDB server · mariadb +2)
- [CVE-2026-85746](https://cve.now/CVE-2026-85746.md): MariaDB: Out-of-bound buffer write on in \`ST\_AsText\` of nested GeometryCollections (CVSS 9.9, MariaDB server · mariadb +2)
- [CVE-2026-92262](https://cve.now/CVE-2026-92262.md): MariaDB: Numerous issues caused by historical #mysql50# tablename encoding bypass. (CVSS 9.9, MariaDB server · mariadb +2)
- [CVE-2026-97380](https://cve.now/CVE-2026-97380.md): MariaDB: GRANT PROXY with empty password incorrectly checks grantor's privileges (CVSS 8.8, MariaDB server · mariadb +2)
- [CVE-2026-85985](https://cve.now/CVE-2026-85985.md): MariaDB: Unauthorized file access via CONNECT engine UDFs (CVSS 5.4, MariaDB server · mariadb +2)
- [CVE-2026-107823](https://cve.now/CVE-2026-107823.md): MariaDB: privilege escalation via incorrect view frm parsing (CVSS 7.2, MariaDB server · mariadb +2)
- [CVE-2026-107822](https://cve.now/CVE-2026-107822.md): MariaDB: database privilege escalation via user / role name collision in the acl cache (CVSS 6.4, MariaDB server · mariadb +2)
- [CVE-2026-107821](https://cve.now/CVE-2026-107821.md): MariaDB: insufficient validation of binary frm data when opening a table (CVSS 8.0, MariaDB server · mariadb +2)
- [CVE-2026-107819](https://cve.now/CVE-2026-107819.md): MariaDB Connector/C: libmariadb allowed cleartext password leakage on TLS hostname verification failure (CVSS 5.9, MariaDB server)
- [CVE-2026-107818](https://cve.now/CVE-2026-107818.md): MariaDB: environment injection via wsrep bootstrap in the mariadb.service file (CVSS 8.4, MariaDB server · mariadb +2)
- [CVE-2026-107817](https://cve.now/CVE-2026-107817.md): MariaDB: mysql\_json plugin OOB reads (CVSS 4.4, MariaDB server · mariadb +2)
- [CVE-2026-107816](https://cve.now/CVE-2026-107816.md): MariaDB: \`qc\_info\` plugin can do OOB reads if query contains \\0 (CVSS 6.4, MariaDB server · mariadb +2)
- [CVE-2026-107815](https://cve.now/CVE-2026-107815.md): MariaDB: one byte OOB write in DOS tables of the CONNECT engine (CVSS 8.5, MariaDB server · mariadb +2)
- [CVE-2026-107814](https://cve.now/CVE-2026-107814.md): MariaDB: Insecure $HOME in MariaDB rpm packages (CVSS 8.4, MariaDB server · mariadb +2)
- [CVE-2026-48165](https://cve.now/CVE-2026-48165.md): MariaDB: unsafe usage of \`wsrep\_sst\_receive\_address\` values on the joiner side (CVSS 8.0, MariaDB server)
- [CVE-2026-48163](https://cve.now/CVE-2026-48163.md): MariaDB: wsrep SST unsafe parameter handling on the donor side (rsync) (CVSS 8.0, MariaDB server)
- [CVE-2026-44173](https://cve.now/CVE-2026-44173.md): MariaDB: FILE privilege was not checked for subqueries in the FROM clause (CVSS 5.0, MariaDB server)
- [CVE-2026-44172](https://cve.now/CVE-2026-44172.md): MariaDB: mysql\_real\_escape\_string() incorrectly handled big5 (CVSS 6.9, MariaDB server · mariadb)
- [CVE-2026-44171](https://cve.now/CVE-2026-44171.md): MariaDB: path traversal in mbstream (CVSS 6.3, MariaDB server)
- [CVE-2026-44169](https://cve.now/CVE-2026-44169.md): MariaDB: Authorization bypass in role-based routine-level privilege check exposes stored routine definitions (CVSS 4.3, MariaDB server)
- [CVE-2026-44168](https://cve.now/CVE-2026-44168.md): MariaDB: wsrep SST unsafe parameter handling on the donor side (CVSS 8.0, MariaDB server)
- [CVE-2026-44170](https://cve.now/CVE-2026-44170.md): MariaDB: Argument injection in CONNECT REST Xcurl on Windows via unsanitized URL (CVSS 6.3, MariaDB server)
- [CVE-2026-49261](https://cve.now/CVE-2026-49261.md): MariaDB server has unsafe parameter handling in \`wsrep\_notify\_cmd\` (CVSS 10.0, MariaDB server)
- [CVE-2026-35549](https://cve.now/CVE-2026-35549.md): An issue was discovered in MariaDB Server before 11.4.10, 11.5.x through 11.8.x before 11.8.6, and 12.x before 12.2.2. (CVSS 6.5, MariaDB)
- [CVE-2026-32710](https://cve.now/CVE-2026-32710.md): Heap-based Buffer Overflow in MariaDB (CVSS 8.6, MariaDB server)
- [CVE-2026-3494](https://cve.now/CVE-2026-3494.md): MariaDB Server Audit Plugin Comment Handling Bypass (CVSS 4.3, MariaDB Foundation MariaDB Server · Amazon Aurora MySQL +5)
- [CVE-2025-13699](https://cve.now/CVE-2025-13699.md): MariaDB mariadb-dump Utility Directory Traversal Remote Code Execution Vulnerability (CVSS 7.0, MariaDB)
- [CVE-2023-52968](https://cve.now/CVE-2023-52968.md): MariaDB Server 10.4 before 10.4.33, 10.5 before 10.5.24, 10.6 before 10.6.17, 10.7 through 10.11 before 10.11.7, 11.0 before 11.0.5, and 11. (CVSS 4.9, MariaDB)
- [CVE-2023-52969](https://cve.now/CVE-2023-52969.md): MariaDB Server 10.4 through 10.5.\*, 10.6 through 10.6.\*, 10.7 through 10.11.\*, and 11.0 through 11.0.\* can sometimes crash with an empty bac (CVSS 4.9, MariaDB)
- [CVE-2023-52970](https://cve.now/CVE-2023-52970.md): MariaDB Server 10.4 through 10.5.\*, 10.6 through 10.6.\*, 10.7 through 10.11.\*, 11.0 through 11.0.\*, and 11.1 through 11.4.\* crashes in Item\_ (CVSS 4.9, MariaDB)
- [CVE-2023-52971](https://cve.now/CVE-2023-52971.md): MariaDB Server 10.10 through 10.11.\* and 11.0 through 11.4.\* crashes in JOIN::fix\_all\_splittings\_in\_plan. (CVSS 4.9, MariaDB)
- [CVE-2022-24052](https://cve.now/CVE-2022-24052.md): MariaDB CONNECT Storage Engine Heap-based Buffer Overflow Privilege Escalation Vulnerability. (CVSS 7.0, MariaDB)
- [CVE-2022-24051](https://cve.now/CVE-2022-24051.md): MariaDB CONNECT Storage Engine Format String Privilege Escalation Vulnerability. (CVSS 7.0, MariaDB)
- [CVE-2022-24050](https://cve.now/CVE-2022-24050.md): MariaDB CONNECT Storage Engine Use-After-Free Privilege Escalation Vulnerability. (CVSS 7.0, MariaDB)
- [CVE-2022-24048](https://cve.now/CVE-2022-24048.md): MariaDB CONNECT Storage Engine Stack-based Buffer Overflow Privilege Escalation Vulnerability. (CVSS 7.0, MariaDB)
- [CVE-2020-15180](https://cve.now/CVE-2020-15180.md): A flaw was found in the mysql-wsrep component of mariadb. (no CVSS, mariadb)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/tech/mariadb
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.