Product by MongoDB
MongoDB C Driver
49 known vulnerabilities in MongoDB C Driver (MongoDB), 0 of them actively exploited (CISA KEV).
Key figures
49
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-93393 | Heap overflow via oversized decrypted TLS record sequence in Windows Secure Channel stream | 8.1 | |
| High | CVE-2026-114644 | Memory-exhaustion denial of service via unbounded symbol interning during BSON/JSON deserialization | 5.9 | |
| High | CVE-2026-88025 | MongoDB C# Driver: Improper Neutralization of Special Elements in Data Query Logic | 8.3 | |
| High | CVE-2026-88034 | MongoDB C++ Driver: Improper Neutralization of Special Elements in Data Query Logic | 8.3 | |
| High | CVE-2026-81522 | Cross-tenant database retargeting via dot/NUL injection in namespace strings in the C++ Driver | 8.1 | |
| High | CVE-2026-96746 | Heap buffer overflow via mid-scan command list growth in client topology monitoring | 6.5 | |
| High | CVE-2022-48282 | Deserializing compromised object with MongoDB .NET/C# Driver may cause remote code execution | 6.6 | |
| High | CVE-2026-114648 | NoSQL injection via dot and dollar characters in LINQ filter field names and dictionary keys | 7.6 | |
| Medium | CVE-2026-93395 | Integer Underflow → Heap Out-of-Bounds Read in `bson_new_from_buffer() | 5.3 | |
| Medium | CVE-2026-114654 | BSON output corruption via out-of-range binary subtype bypassing UUID and OldBinary guards | 6.5 | |
| High | CVE-2026-88036 | GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB C Driver | 8.3 | |
| Medium | CVE-2026-114651 | Cross-document data leak via malformed BSON array parsing in reused thread buffer | 4.0 | |
| High | CVE-2026-88026 | Regular expression injection via unescaped characters in LINQ query translation in MongoDB C# Driver | 6.5 | |
| High | CVE-2026-114652 | Update operator injection via single-element list rewriting in the update builder | 6.5 | |
| High | CVE-2026-84964 | Heap corruption via OCSP request double free from crafted multi-URL certificate in TLS client | 5.9 | |
| High | CVE-2026-114649 | Authentication bypass via issuer-and-serial-only certificate equality in shared cluster cache | 6.8 | |
| Medium | CVE-2026-114646 | NoSQL command injection via mismatched raw BSON length prefix written verbatim to the wire | 6.5 | |
| High | CVE-2026-106437 | Out-of-bounds read and write via undersized BSON buffer reservation in MongoDB C Driver | 7.4 | |
| High | CVE-2026-114653 | Silent client-side encryption bypass via unescaped field-name regex in CSFLE schema builder | 6.5 | |
| High | CVE-2023-0437 | MongoDB client C Driver may infinitely loop when validating certain BSON input data | 5.3 | |
| Medium | CVE-2026-114643 | Duplicate geometry fields via unvalidated GeoJSON extra members | 5.4 | |
| Medium | CVE-2026-114650 | Plaintext exposure of encrypted fields via ANSI code-page corruption of database name | 5.9 | |
| Medium | CVE-2026-93394 | libmongoc SCRAM client nonce-validation bypass | 3.7 | |
| High | CVE-2026-81529 | Connection-option injection via unescaped settings in the canonical MongoDB URL builder | 7.1 | |
| Medium | CVE-2026-81527 | NoSQL injection via unquoted constant GroupBy keys in LINQ pipeline translation | 6.5 |