MariaDB vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
44 matching records
- High8.5MariaDB server is a community developed fork of MySQL server.Check if you run itEPSS 1.38%Oct 9, 2026
- High8.4MariaDB server is a community developed fork of MySQL server.Check if you run itEPSS 0.49%Oct 9, 2026
- High7.4MariaDB Connector/Node.js: SQL injection in the text protocol when the session uses NO_BACKSLASH_ESCAPESCheck if you run itEPSS 0.44%Oct 8, 2026
- High8.1MariaDB Connector/Node.js: SQL injection through object keys in SET expansion (permitSetMultiParamEntries)Check if you run itEPSS 0.45%Oct 8, 2026
- High7.5MariaDB Connector/Node.js exposes uninitialized process memory through malformed GeoJSON parametersCheck if you run itEPSS 0.39%Oct 8, 2026
- Medium5.9MariaDB Connector/Node.js: Uncaught exception crashes the client during ed25519 authentication with zero-configuration TLSCheck if you run itEPSS 0.24%Oct 8, 2026
- Medium6.6Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication).Check if you run itEPSS 0.36%Jul 21, 2026
- High7.1SOGo before 5.12.7, when PostgreSQL or MariaDB is used, and cleartext passwords are stored, allows SQL injection.Check if you run itEPSS 0.24%May 14, 2026
- Medium6.5An issue was discovered in MariaDB Server before 11.4.10, 11.5.x through 11.8.x before 11.8.6, and 12.x before 12.2.2.Check if you run itEPSS 0.27%Apr 3, 2026
- Critical9.9MariaDB server is a community developed fork of MySQL server.Check if you run itEPSS 0.87%Mar 20, 2026
- High8.8A critical SQL injection vulnerability in Spring AI's MariaDBFilterExpressionConverter allows attackers to bypass metadata-based access controls and execute arbitrary SQL commands.Check if you run itEPSS 0.53%Mar 18, 2026
- Medium5.3In MariaDB server version through 11.8.5, when server audit plugin is enabled with server_audit_events variable configured with QUERY_DCL, QUERY_DDL, or QUERY_DML filt…Check if you run itEPSS 0.30%Mar 3, 2026
- High8.5MilleGPG5 5.7.2 contains a local privilege escalation vulnerability that allows authenticated users to modify service executable files in the MariaDB bin directory.Check if you run itEPSS 0.11%Jan 15, 2026
- High7.5An issue was discovered in MariaDB MCP 0.1.0 allowing attackers to gain sensitive information via the SSE service as the SSE service lacks user validation.Check if you run itEPSS 0.34%Sep 10, 2025
- UnknownMySQL, MariaDB, Percona malloc_lib Remote Root Code ExecutionPatch nowKEVEPSS 67.73%May 14, 2024
- Medium6.5MariaDB Server before 10.3.34 thru 10.9.3 is vulnerable to Denial of Service.Check if you run itEPSS 1.55%Jan 20, 2023
- High7.5zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.Check this weekEPSS 51.73%Mar 25, 2022
- UnknownImportant: mariadb:10.3 and mariadb-devel:10.3 security updateOpen the advisoryApr 19, 2021
- UnknownModerate: mariadb:10.3 security and bug fix updateOpen the advisoryNov 5, 2019