Vulnerabilidades en MariaDB
37 resultadosCVE-2026-44168HIGHMariaDB: wsrep SST unsafe parameter handling on the donor sideEPSS 0.6%CVE-2026-85745MEDIUMMariaDB: Out-of-bound buffer read on in `ST_Area` of a multipolygon.EPSS 0.5%CVE-2025-13699HIGHMariaDB mariadb-dump Utility Directory Traversal Remote Code Execution VulnerabilityEPSS 0.5%CVE-2026-107822MEDIUMMariaDB: database privilege escalation via user / role name collision in the acl cacheEPSS 0.5%CVE-2023-52971MEDIUMMariaDB Server 10.10 through 10.11.* and 11.0 through 11.4.* crashes in JOIN::fix_all_splittings_in_plan.EPSS 0.5%CVE-2026-107814HIGHMariaDB: Insecure $HOME in MariaDB rpm packagesEPSS 0.5%CVE-2023-52969MEDIUMMariaDB Server 10.4 through 10.5.*, 10.6 through 10.6.*, 10.7 through 10.11.*, and 11.0 through 11.0.* can sometimes crash with an empty bacEPSS 0.5%CVE-2023-52970MEDIUMMariaDB Server 10.4 through 10.5.*, 10.6 through 10.6.*, 10.7 through 10.11.*, 11.0 through 11.0.*, and 11.1 through 11.4.* crashes in Item_EPSS 0.5%CVE-2023-52968MEDIUMMariaDB Server 10.4 before 10.4.33, 10.5 before 10.5.24, 10.6 before 10.6.17, 10.7 through 10.11 before 10.11.7, 11.0 before 11.0.5, and 11.EPSS 0.5%CVE-2026-85985MEDIUMMariaDB: Unauthorized file access via CONNECT engine UDFsEPSS 0.5%CVE-2026-107818HIGHMariaDB: environment injection via wsrep bootstrap in the mariadb.service fileEPSS 0.4%CVE-2026-107819MEDIUMMariaDB Connector/C: libmariadb allowed cleartext password leakage on TLS hostname verification failureEPSS 0.3%CVE-2026-107816MEDIUMMariaDB: `qc_info` plugin can do OOB reads if query contains \0EPSS 0.3%CVE-2026-35549MEDIUMAn issue was discovered in MariaDB Server before 11.4.10, 11.5.x through 11.8.x before 11.8.6, and 12.x before 12.2.2. If the caching_sha2_pEPSS 0.3%CVE-2026-44169MEDIUMMariaDB: Authorization bypass in role-based routine-level privilege check exposes stored routine definitionsEPSS 0.2%CVE-2026-44171MEDIUMMariaDB: path traversal in mbstreamEPSS 0.2%CVE-2026-107817MEDIUMMariaDB: mysql_json plugin OOB readsEPSS 0.2%