Vulnerabilidades em MariaDB
37 resultadosAnálise Vexday
MariaDB apresenta 20 vulnerabilidades catalogadas, com 9 publicadas nos últimos 90 dias, indicando atividade recente de descoberta. Nenhuma vulnerabilidade está sob ataque ativo registrado, embora 1 crítica (CVSS) demande atenção, e a fraqueza dominante é injeção de comando (CWE-78), padrão em bancos de dados. O risco é moderado e atual, mas sem exploração em campanha conhecida no momento.
CVE-2026-49261CRITICALMariaDB server has unsafe parameter handling in `wsrep_notify_cmd`EPSS 1.6%CVE-2026-48165HIGHMariaDB: unsafe usage of `wsrep_sst_receive_address` values on the joiner sideEPSS 1.5%CVE-2026-92262CRITICALMariaDB: Numerous issues caused by historical #mysql50# tablename encoding bypass.EPSS 1.5%CVE-2026-107815HIGHMariaDB: one byte OOB write in DOS tables of the CONNECT engineEPSS 1.4%CVE-2026-44170MEDIUMMariaDB: Argument injection in CONNECT REST Xcurl on Windows via unsanitized URLEPSS 1.3%CVE-2026-97380HIGHMariaDB: GRANT PROXY with empty password incorrectly checks grantor's privilegesEPSS 1.3%CVE-2026-107821HIGHMariaDB: insufficient validation of binary frm data when opening a tableEPSS 1.2%CVE-2026-85748CRITICALMariaDB: Use-after-free with a large number of SYS_REFCURSOR'sEPSS 1.2%CVE-2026-44172MEDIUMMariaDB: mysql_real_escape_string() incorrectly handled big5EPSS 1.0%CVE-2026-85746CRITICALMariaDB: Out-of-bound buffer write on in `ST_AsText` of nested GeometryCollectionsEPSS 1.0%CVE-2026-48163HIGHMariaDB: wsrep SST unsafe parameter handling on the donor side (rsync)EPSS 0.9%CVE-2026-32710HIGHHeap-based Buffer Overflow in MariaDBEPSS 0.9%CVE-2026-86047HIGHMariaDB: Insufficient quoting in mariadb-dump and SHOW commandsEPSS 0.9%CVE-2026-107823HIGHMariaDB: privilege escalation via incorrect view frm parsingEPSS 0.8%CVE-2026-102523HIGHMariaDB server: Authorization bypass via ALTER TABLE ... CONVERT ... PARTITIONEPSS 0.8%CVE-2022-24052HIGHMariaDB CONNECT Storage Engine Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to eEPSS 0.7%CVE-2022-24048HIGHMariaDB CONNECT Storage Engine Stack-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to EPSS 0.7%CVE-2022-24051HIGHMariaDB CONNECT Storage Engine Format String Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate priviEPSS 0.7%CVE-2022-24050HIGHMariaDB CONNECT Storage Engine Use-After-Free Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privEPSS 0.6%CVE-2026-44173MEDIUMMariaDB: FILE privilege was not checked for subqueries in the FROM clauseEPSS 0.6%