Product by Firebird Foundation
Firebird SQL Server
46 known vulnerabilities in Firebird SQL Server (Firebird Foundation), 0 of them actively exploited (CISA KEV).
Key figures
46
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2017-11509 | Firebird SQL Server: Code Execution | 8.8 | |
| High | CVE-2017-6369 | FirebirdSQL Firebird: security vulnerability | 8.8 | |
| Medium | CVE-2016-1569 | FirebirdSQL Firebird: Denial of Service | 6.5 | |
| Critical | CVE-2026-40342 | Firebird: Path Traversal + Arbitrary File Write Leads to Remote Code Execution | 9.9 | |
| Medium | CVE-2026-28214 | Firebird server hangs when using specific clumplet on batch creation | 6.5 | |
| Not rated | CVE-2008-0387 | FirebirdSQL Firebird: Integer Overflow | — | |
| Not rated | CVE-2013-2492 | FirebirdSQL Firebird: Stack-Based Buffer Overflow | — | |
| Not rated | CVE-2001-0008 | Borland Software Interbase: security vulnerability | — | |
| Not rated | CVE-2007-3181 | FirebirdSQL Firebird: Buffer Overflow | — | |
| Not rated | CVE-2004-2043 | Borland Software Interbase: Buffer Overflow | — | |
| Not rated | CVE-2007-5245 | FirebirdSQL Firebird: Stack-Based Buffer Overflow | — | |
| Not rated | CVE-2009-2620 | FirebirdSQL Firebird: NULL Pointer Dereference | — | |
| Not rated | CVE-2007-4992 | FirebirdSQL Firebird: Stack-Based Buffer Overflow | — | |
| Not rated | CVE-2007-5246 | FirebirdSQL Firebird: Stack-Based Buffer Overflow | — | |
| High | CVE-2026-33337 | Firebird has a buffer overflow when parsing corrupted slice packets | 7.5 | |
| Not rated | CVE-2008-0467 | FirebirdSQL Firebird: Stack-Based Buffer Overflow | — | |
| High | CVE-2026-28224 | Firebird Null Pointer Dereference via CryptCallback causes DOS | 8.2 | |
| High | CVE-2026-27890 | Firebird has Pre-Auth DOS when Processing Out of Order CNCT_specific_data Segments | 8.2 | |
| High | CVE-2026-28212 | Firebird has potential server crash via null pointer dereference when processing op_slice packet | 7.5 | |
| High | CVE-2026-35215 | Firebird: DoS via malicious slice descriptor in slice packet | 7.5 | |
| High | CVE-2026-34232 | Firebird: DoS via `op_response` packet from client | 7.5 | |
| High | CVE-2025-24975 | Firebird Non-Authorized Access to Encrypted Database Using Execute Statement on External | 7.1 | |
| High | CVE-2023-41038 | Server crash when using specific form of SET BIND statement | 7.5 | |
| Not rated | CVE-2014-9323 | FirebirdSQL Firebird: NULL Pointer Dereference | — | |
| High | CVE-2025-65104 | Firebird: Information leak vulnerability in firebird3 client when used with newer server | 7.9 |