Skip to content
OpenAdvisories

Package · Debian

mariadb

43 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.9
    CVE-2026-92262 Public exploit

    MariaDB: Numerous issues caused by historical #mysql50# tablename encoding bypass.

    MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the #mysql50# bypass prefix is affected because it allows the #mysql50# prefix to bypass normal table-name filesystem encod…

    MariaDB server mariadb-10.3 mariadb-10.0 Debian Ubuntu
  • High 8.0
    CVE-2026-107821 Public exploit

    MariaDB: insufficient validation of binary frm data when opening a table

    MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB insufficiently validated counts, offsets, lengths, and field boundaries in FRM metadata while opening binary FRM fi…

    MariaDB server mariadb-10.3 mariadb-10.0 Debian Ubuntu
  • High 8.6
    CVE-2026-32710 Public exploit

    Heap-based Buffer Overflow in MariaDB

    MariaDB server is a community developed fork of MySQL server. An authenticated user can crash MariaDB versions 11.4 before 11.4.10 and 11.8 before 11.8.6 via a bug in JSON_SCHEMA_VALID() function. Under certain conditions it might be possible to turn the cras…

    MariaDB server mariadb mariadb Debian Ubuntu
  • Medium 4.3
    CVE-2026-3494 Public exploit

    MariaDB Server Audit Plugin Comment Handling Bypass

    In MariaDB server version through 11.8.5, when server audit plugin is enabled with server_audit_events variable configured with QUERY_DCL, QUERY_DDL, or QUERY_DML filtering, if an authenticated database user invokes a SQL statement prefixed with double-hyphen…

    amazon MariaDB Foundation Aurora MySQL RDS for MariaDB Debian Ubuntu Alpine