MariaDB vulnerabilities

CVEs per yearBy the year they were published

1. 20224
2. 20251
3. 20254
4. 202627

Newest CVEs

• CVE-2026-86047

  MariaDB: Insufficient quoting in mariadb-dump and SHOW commands

  MariaDB · server

  High7.7
• CVE-2026-85745

  MariaDB: Out-of-bound buffer read on in `ST_Area` of a multipolygon.

  MariaDB · server

  Medium4.3
• CVE-2026-85748

  MariaDB: Use-after-free with a large number of SYS_REFCURSOR's

  MariaDB · server

  Critical9.9
• CVE-2026-85746

  MariaDB: Out-of-bound buffer write on in `ST_AsText` of nested GeometryCollections

  MariaDB · server

  Critical9.9
• CVE-2026-92262

  MariaDB: Numerous issues caused by historical #mysql50# tablename encoding bypass.

  MariaDB · server

  Critical9.9
• CVE-2026-97380

  MariaDB: GRANT PROXY with empty password incorrectly checks grantor's privileges

  MariaDB · server

  High8.8
• CVE-2026-85985

  MariaDB: Unauthorized file access via CONNECT engine UDFs

  MariaDB · server

  Medium5.4
• CVE-2026-107823

  MariaDB: privilege escalation via incorrect view frm parsing

  MariaDB · server

  High7.2
• CVE-2026-107822

  MariaDB: database privilege escalation via user / role name collision in the acl cache

  MariaDB · server

  Medium6.4
• CVE-2026-107821

  MariaDB: insufficient validation of binary frm data when opening a table

  MariaDB · server

  High8.0