Product by Mongodb Inc.
Mongodb C Driver
9 known vulnerabilities in Mongodb C Driver (Mongodb Inc.), 0 of them actively exploited (CISA KEV).
Key figures
9
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-93393 | Heap overflow via oversized decrypted TLS record sequence in Windows Secure Channel stream | 8.1 | |
| Medium | CVE-2026-93395 | Integer Underflow → Heap Out-of-Bounds Read in `bson_new_from_buffer() | 5.3 | |
| High | CVE-2023-0437 | MongoDB client C Driver may infinitely loop when validating certain BSON input data | 5.3 | |
| Medium | CVE-2026-93394 | libmongoc SCRAM client nonce-validation bypass | 3.7 | |
| High | CVE-2026-6691 | MongoDB C Driver Cyrus SASL Canonicalization Buffer Overflow | 7.8 | |
| High | CVE-2021-32050 | MongoDB: Exposure of Sensitive Information to an Unauthorized Actor | 4.2 | |
| High | CVE-2024-7553 | Accessing Untrusted Directory May Allow Local Privilege Escalation | 7.3 | |
| Medium | CVE-2021-20331 | MongoDB C# Driver: Exposure of Sensitive Information to an Unauthorized Actor | 4.2 | |
| Low | CVE-2026-4359 | Heap-buffer-over-read in _mongoc_http_send via strstr on non-null-terminated buffer | 2.0 |