Vendor

    MariaDB

    450 known vulnerabilities in products by MariaDB, 0 of them actively exploited (CISA KEV).

    Key figures

    450

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    11

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority.

    Vulnerabilities in MariaDB
    SeverityCVETitleCVSSPublished
    CriticalCVE-2016-6662

    MariaDB: Code Execution

    		9.8
    CriticalCVE-2016-9843

    zlib: security vulnerability

    		9.8
    HighCVE-2022-0778

    Infinite loop in BN_mod_sqrt() reachable when parsing certificates

    		7.5
    HighCVE-2014-0224

    OpenSSL: Information Disclosure

    		7.4
    HighCVE-2018-25032

    zlib: Memory Corruption

    		7.5
    CriticalCVE-2026-49261

    MariaDB server has unsafe parameter handling in `wsrep_notify_cmd`

    		10.0
    CriticalCVE-2026-44170

    MariaDB: Argument injection in CONNECT REST Xcurl on Windows via unsanitized URL

    		9.8
    CriticalCVE-2020-15180

    Mariadb: Improper Input Validation

    		9.0
    HighCVE-2021-27928

    MariaDB: Remote Code Execution

    		7.2
    CriticalCVE-2023-26785

    MariaDB: Remote Code Execution

    		9.8
    HighCVE-2017-15365

    MariaDB: security vulnerability

    		8.8
    MediumCVE-2016-3521

    MariaDB: security vulnerability

    		6.5
    HighCVE-2017-3302

    Oracle MySQL Server: security vulnerability

    		7.5
    HighCVE-2026-48165

    MariaDB: unsafe usage of `wsrep_sst_receive_address` values on the joiner side

    		8.0
    MediumCVE-2016-3492

    Oracle MySQL Server: security vulnerability

    		6.5
    MediumCVE-2016-5626

    Oracle MySQL Server: security vulnerability

    		6.5
    CriticalCVE-2026-92262

    MariaDB Server: Use of Incorrectly-Resolved Name or Reference

    		9.9
    MediumCVE-2021-2389

    Oracle MySQL Server: security vulnerability

    		5.9
    HighCVE-2016-6663

    Oracle MySQL Server: Race Condition

    		7.0
    MediumCVE-2016-5624

    Oracle MySQL Server: security vulnerability

    		6.5
    MediumCVE-2015-3152

    MariaDB: security vulnerability

    		5.9
    HighCVE-2026-107815

    MariaDB: one byte OOB write in DOS tables of the CONNECT engine

    		8.5
    HighCVE-2020-13249

    MariaDB Connector\/c: security vulnerability

    		8.8
    MediumCVE-2017-3238

    Oracle MySQL Server: security vulnerability

    		6.5
    HighCVE-2017-3308

    Oracle MySQL Server: security vulnerability

    		7.7

    All vulnerabilities in search

    News

    Products

    Products by MariaDB
    ProductCVEsActively exploited
    MariaDB4360
    Server260
    Mariadb Connector/node.js70
    Mariadb Community Server30