Known vulnerabilities in MariaDB
Vendor:
MariaDB Foundation
Software:
MariaDB
Software CPE:
cpe:2.3:a:mariadb_foundation:mariadb:*:*:*:*:*:*:*:*
Website:
https://mariadb.org/
Total vulnerabilities:
70
Public exploits:
2
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
10.6.28
13.1.0
13.0.1
12.3.2
11.8.8
11.4.12
10.11.18
10.6.27
11.8.7
11.4.11
10.11.17
10.6.26
13.0.0
12.3.1
12.2.2
11.8.6
11.4.10
10.11.16
10.6.25
12.3.0
12.2.1
12.1.2
11.8.5
11.8.4
11.4.9
10.11.15
10.6.24
12.2.0
12.1.1
12.0.2
11.8.3
11.4.8
10.11.14
10.6.23
12.1.0
12.0.1
11.8.2
11.4.7
10.11.13
11.4.6
10.11.12
10.6.22
10.5.29
12.0.0
11.8.1
11.7.2
11.4.5
10.11.11
10.6.21
10.5.28
11.8.0
11.7.1
11.6.2
11.4.4
11.2.6
10.11.10
10.6.20
10.5.27
11.7.0
11.6.1
11.5.2
11.4.3
11.2.5
11.1.6
10.11.9
10.6.19
10.5.26
11.6.0
11.5.1
11.4.2
11.2.4
11.1.5
11.0.6
10.11.8
10.6.18
10.5.25
10.4.34
11.5.0
11.4.1
11.3.2
11.0.5
11.2.3
11.1.4
10.11.7
10.6.17
10.5.24
10.4.33
11.4.0
11.3.1
11.2.2
11.1.3
11.0.4
10.11.6
10.10.7
10.6.16
10.5.23
10.4.32
11.3.0
11.2.1
11.1.2
11.0.3
10.11.5
10.10.6
10.9.8
10.6.15
10.5.22
10.4.31
11.2.0
10.10.5
10.9.7
10.6.14
10.5.21
10.4.30
11.0.2
11.1.1
10.11.4
10.11.3
10.10.4
10.9.6
10.8.8
10.6.13
10.5.20
10.4.29
10.3.39
11.1.0
11.0.1
10.11.2
10.10.3
10.9.5
10.8.7
10.7.8
10.6.12
10.5.19
10.4.28
10.3.38
11.0.0
10.11.1
10.10.2
10.9.4
10.8.6
10.7.7
10.6.11
10.5.18
10.4.27
10.3.37
10.11.0
10.9.3
10.8.5
10.7.6
10.6.10
10.10.1
10.9.2
10.8.4
10.7.5
10.6.9
10.5.17
10.4.26
10.3.36
10.10.0
10.9.1
10.8.3
10.7.4
10.6.8
10.5.16
10.4.25
10.3.35
10.2.44
10.9.0
10.8.2
10.7.3
10.6.7
10.5.15
10.4.24
10.3.34
10.2.43
10.8.0
10.7.1
10.7.0
10.6.5
10.5.13
10.4.22
10.3.32
10.2.41
10.6.4
10.5.12
10.4.21
10.3.31
10.2.40
10.6.3
10.5.11
10.4.20
10.3.30
10.2.39
10.6.2
10.6.1
10.5.10
10.4.19
10.3.29
10.2.38
10.6.0
10.5.9
10.4.18
10.3.28
10.2.37
10.5.8
10.5.7
10.5.6
10.5.5
10.5.4
10.5.3
10.5.2
10.5.1
10.5.0
10.4.17
10.4.16
10.4.15
10.4.14
10.4.13
10.4.12
10.4.11
10.4.10
10.4.8
10.4.7
10.4.6
10.4.5
10.4.4
10.4.3
10.4.2
10.4.1
10.4.0
10.3.27
10.3.26
10.3.25
10.3.24
10.3.23
10.3.22
10.3.21
10.3.20
10.3.18
10.3.17
10.3.16
10.3.15
10.3.14
10.3.13
10.3.12
10.3.11
10.3.10
10.3.9
10.3.8
10.3.7
10.2.36
10.2.35
10.2.34
10.2.33
10.2.32
10.2.31
10.2.30
10.2.29
10.2.27
10.2.26
10.2.25
10.2.24
10.2.23
10.2.22
10.2.21
10.2.20
10.2.19
10.2.18
10.2.17
10.2.16
10.2.15
10.1.48
10.1.47
10.1.46
10.1.45
10.1.44
10.1.43
10.1.41
10.1.40
10.1.39
10.1.38
10.1.37
10.1.36
10.1.35
10.1.34
10.1.33
10.0.38
10.0.37
10.0.36
10.0.35
5.5.68
5.5.67
5.5.66
5.5.65
5.5.64
5.5.63
5.5.62
5.5.61
5.5.26
5.5.19
5.5.18
5.5.17
5.5.16
5.5.15
5.5.14
5.5.13
5.5.12
5.5.11
5.5.10
5.1.65
5.1.64
5.1.63
5.1.59
5.1.58
5.1.57
5.1.56
5.1.54
5.1.52
5.5.28a
10.3.6
10.3.5
10.3.4
10.3.3
10.3.2
10.3.1
10.3.0
10.2.14
10.2.13
10.2.12
10.2.11
10.2.10
10.2.9
10.2.8
10.2.7
10.2.6
10.2.5
10.2.4
10.2.3
10.2.2
10.2.1
10.2.0
10.1.32
10.1.31
10.1.30
10.1.29
10.1.28
10.1.26
10.1.25
10.1.24
10.1.23
10.1.22
10.1.21
10.1.20
10.1.19
10.1.18
10.1.17
10.1.16
10.1.14
10.1.13
10.1.12
10.1.11
10.1.10
10.1.9
10.1.8
10.1.7
10.1.6
10.1.5
10.1.4
10.1.3
10.1.2
10.1.1
10.1.0
10.0.34
10.0.33
10.0.32
10.0.31
10.0.30
10.0.29
10.0.28
10.0.27
10.0.26
10.0.25
10.0.24
10.0.23
10.0.22
10.0.21
10.0.20
10.0.19
10.0.18
10.0.17
10.0.16
10.0.15
10.0.14
10.0.13
10.0.12
10.0.11
10.0.10
10.0.9
10.0.8
10.0.7
10.0.6
10.0.5
10.0.4
10.0.3
10.0.2
10.0.1
10.0.0
5.5.60
5.5.59
5.5.58
5.5.57
5.5.56
5.5.55
5.5.54
5.5.53
5.5.52
5.5.51
5.5.50
5.5.49
5.5.48
5.5.47
5.5.46
5.5.45
5.5.44
5.5.43
5.5.42
5.5.41
5.5.40
5.5.39
5.5.38
5.5.37
5.5.36
5.5.35
5.5.34
5.5.33
5.5.32
5.5.31
5.5.30
5.5.29
5.5.28
5.5.27
5.5.25
5.5.24
5.5.23
5.5.22
5.5.21
5.5.20
5.3.12
5.3.11
5.3.10
5.3.9
5.3.8
5.3.7
5.3.6
5.3.5
5.3.4
5.3.3
5.3.2
5.3.1
5.3.0
5.2.14
5.2.13
5.2.12
5.2.11
5.2.10
5.2.9
5.2.8
5.2.7
5.2.6
5.2.5
5.2.4
5.2.3
5.2.2
5.2.1
5.2.0
5.1.67
5.1.66
5.1.62
5.1.61
5.1.60
5.1.55
5.1.53
5.1.51
5.1.50
5.1.49
5.1.47
5.1.44
5.1.42
5.1.41
Vulnerabilities (70)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU121008 - Insecure Automated Optimizations CVE-2023-52971 |
CWE-1038 | Low | 10.11.12, 11.4.6, 11.8.2 | 07.01.2026 |
SB2025122915 SB2026010703 SB2026010704 and 5 more |
||
| #VU120623 - Insecure Automated Optimizations CVE-2023-52970 |
CWE-1038 | Low | 10.5.29, 10.6.22, 10.11.12, 11.4.6, 11.8.2 | 29.12.2025 |
SB2025122915 SB2025122918 SB2025122926 and 12 more |
||
| #VU120622 - Insecure Automated Optimizations CVE-2023-52969 |
CWE-1038 | Low | 10.5.29, 10.6.22, 10.11.12, 11.4.6, 11.8.2 | 29.12.2025 |
SB2025122915 SB2025122918 SB2025122920 and 16 more |
||
| #VU118851 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2025-13699 |
CWE-22 | High | 10.6.24, 10.11.15, 11.4.9, 11.8.4 | 01.12.2025 |
SB2025120126 SB2025121762 SB2025121943 and 31 more |
||
| #VU81995 - Resource exhaustion CVE-2023-5157 |
CWE-400 | Medium | 10.4.26, 10.5.17, 10.6.9, 10.7.5, 10.8.4 | 13.10.2023 |
SB2023101315 SB2023101320 SB2023101609 and 8 more |
||
| #VU77142 - NULL Pointer Dereference CVE-2022-47015 |
CWE-476 | Medium | 10.3.39, 10.4.29, 10.5.20, 10.6.13, 10.8.8, 10.9.6, 10.10.4, 10.11.3 | 11.06.2023 |
SB2023061103 SB2023061107 SB2023061108 and 19 more |
||
| #VU66552 - Reachable Assertion CVE-2022-32082 |
CWE-617 | Medium | 10.5.17, 10.6.9, 10.7.5, 10.8.4 | 16.08.2022 |
SB2022081648 SB2022081650 SB2022090743 and 27 more |
||
| #VU66024 - Memory corruption CVE-2022-32084 |
CWE-119 | Low | 10.3.36, 10.4.26, 10.5.17, 10.6.9, 10.7.5, 10.8.4 | 03.08.2022 |
SB2022080403 SB2022080424 SB2022081650 and 35 more |
||
| #VU65821 - Memory corruption CVE-2022-32091 |
CWE-119 | Low | 10.7.4 | 27.07.2022 |
SB2022072739 SB2022081650 SB2022090743 and 32 more |
||
| #VU63545 - Use After Free CVE-2022-27458 |
CWE-416 | Low | 10.2.43, 10.3.35, 10.4.25, 10.5.16, 10.6.8, 10.7.4, 10.9.1 | 23.05.2022 |
SB2022052321 SB2022052322 SB2022061533 and 16 more |
||
| #VU63543 - Use After Free CVE-2022-27457 |
CWE-416 | Low | 10.4.25, 10.5.16, 10.6.8, 10.7.4, 10.8.3, 10.9.1 | 23.05.2022 |
SB2022052321 SB2022052322 SB2022061533 and 12 more |
||
| #VU63540 - Use After Free CVE-2022-27456 |
CWE-416 | Low | 10.9.1 | 23.05.2022 |
SB2022052321 SB2022052322 SB2022061533 and 17 more |
||
| #VU63538 - Use After Free CVE-2022-27455 |
CWE-416 | Low | 10.4.25, 10.5.16, 10.6.8, 10.7.4, 10.9.1 | 23.05.2022 |
SB2022052321 SB2022052322 SB2022061533 and 12 more |
||
| #VU63534 - Memory corruption CVE-2022-27451 |
CWE-119 | Low | 10.4.25, 10.5.16, 10.6.8, 10.7.4, 10.8.3, 10.9.1 | 23.05.2022 |
SB2022052321 SB2022052322 SB2022061533 and 12 more |
||
| #VU63532 - Memory corruption CVE-2022-27449 |
CWE-119 | Low | 10.9.1 | 23.05.2022 |
SB2022052321 SB2022052322 SB2022061533 and 17 more |
||
| #VU63531 - Memory corruption CVE-2022-27448 |
CWE-119 | Low | 10.3.35, 10.4.25, 10.5.16, 10.6.8, 10.7.4, 10.8.3, 10.9.1 | 23.05.2022 |
SB2022052321 SB2022052322 SB2022061533 and 17 more |
||
| #VU63529 - Use After Free CVE-2022-27447 |
CWE-416 | Low | 10.2.43, 10.3.35, 10.4.25, 10.5.16, 10.6.8, 10.7.4, 10.9.1 | 23.05.2022 |
SB2022052321 SB2022052322 SB2022061533 and 17 more |
||
| #VU63526 - Memory corruption CVE-2022-27446 |
CWE-119 | Low | 10.4.25, 10.5.16, 10.6.8, 10.7.4, 10.8.3, 10.9.1 | 23.05.2022 |
SB2022052321 SB2022052322 SB2022061533 and 12 more |
||
| #VU63525 - Memory corruption CVE-2022-27445 |
CWE-119 | Low | 10.9.1 | 23.05.2022 |
SB2022052321 SB2022052322 SB2022061533 and 21 more |
||
| #VU63523 - Memory corruption CVE-2022-27444 |
CWE-119 | Low | 10.4.25, 10.5.16, 10.6.8, 10.7.4, 10.8.3, 10.9.1 | 23.05.2022 |
SB2022052321 SB2022052322 SB2022061533 and 13 more |
Showing elements 1 - 20 out of 70