By year
12
13
14
16
17
20
21
22
23
24
25
26
Bars are flaws published each year; the red part is the share attackers have used.
Latest high and critical flaws
- CVE-2026-97380 MariaDB server is a community developed fork of MySQL server.High 8.8 · Oct 16, 2026
- CVE-2026-92262 MariaDB server is a community developed fork of MySQL server.Critical 9.9 · Oct 16, 2026
- CVE-2026-86047 MariaDB server is a community developed fork of MySQL server.High 7.7 · Oct 16, 2026
- CVE-2026-85748 MariaDB server is a community developed fork of MySQL server.Critical 9.9 · Oct 16, 2026
- CVE-2026-85746 MariaDB server is a community developed fork of MySQL server.Critical 9.9 · Oct 16, 2026
- CVE-2026-107823 MariaDB server is a community developed fork of MySQL server.High 7.2 · Oct 9, 2026
- CVE-2026-107821 MariaDB server is a community developed fork of MySQL server.High 8 · Oct 9, 2026
- CVE-2026-107818 MariaDB server is a community developed fork of MySQL server.High 8.4 · Oct 9, 2026
- CVE-2026-107815 MariaDB server is a community developed fork of MySQL server.High 8.5 · Oct 9, 2026
- CVE-2026-107814 MariaDB server is a community developed fork of MySQL server.High 8.4 · Oct 9, 2026
- CVE-2026-48165 MariaDB server is a community developed fork of MySQL server.High 8 · Jun 12, 2026
- CVE-2026-48163 MariaDB server is a community developed fork of MySQL server.High 8 · Jun 12, 2026
- CVE-2026-44168 MariaDB server is a community developed fork of MySQL server.High 8 · Jun 12, 2026
- CVE-2026-49261 MariaDB server is a community developed fork of MySQL server.Critical 10 · Jun 11, 2026
- CVE-2026-32710 MariaDB server is a community developed fork of MySQL server.High 8.5 · Mar 20, 2026
- CVE-2025-13699 MariaDB mariadb-dump Utility Directory Traversal Remote Code Execution Vulnerability.High 7 · Dec 23, 2025
- CVE-2025-56404 An issue was discovered in MariaDB MCP 0.1.0 allowing attackers to gain sensitive information via the SSE service as the SSE service lacks user validation.High 7.5 · Sep 10, 2025
- CVE-2023-26785 MariaDB v10.5 was discovered to contain a remote code execution (RCE) vulnerability via UDF Code in a Shared Object File, followed by a "create function" statemCritical 9.8 · Oct 17, 2024
- CVE-2022-32091 MariaDB v10.7 was discovered to contain an use-after-poison in in __interceptor_memset at /libsanitizer/sanitizer_common/sanitizer_common_interceptors.inc.High 7.5 · Jul 1, 2022
- CVE-2022-32089 MariaDB v10.5 to v10.7 was discovered to contain a segmentation fault via the component st_select_lex_unit::exclude_level.High 7.5 · Jul 1, 2022
- CVE-2022-32088 MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Exec_time_tracker::get_loops/Filesort_tracker::report_use/filesort.High 7.5 · Jul 1, 2022
- CVE-2022-32087 MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Item_args::walk_args.High 7.5 · Jul 1, 2022
- CVE-2022-32086 MariaDB v10.4 to v10.8 was discovered to contain a segmentation fault via the component Item_field::fix_outer_field.High 7.5 · Jul 1, 2022
- CVE-2022-32085 MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Item_func_in::cleanup/Item::cleanup_processor.High 7.5 · Jul 1, 2022
- CVE-2022-32084 MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component sub_select.High 7.5 · Jul 1, 2022
Part of our vulnerability database: the whole National Vulnerability Database plus CISA’s exploited list, refreshed twice a day. This is general guidance, not a review of your systems.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.