MySQL Server vulnerabilities
122 known CVE vulnerabilities in MySQL Server, translated and rated.
- CVE-2026-34278Medium
A vulnerability in Oracle MySQL Server (Server: Optimizer component) affects versions 8.0.0-8.0.45. An easily exploitable flaw allows a high-privileged attacker with network access via multiple protocols to cause a hang or frequently repeatable crash of MySQL Server (complete DoS). CVSS 3.1 Base Score is 4.9 (availability impact).
- CVE-2026-34276Medium
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). Affects versions 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. An easily exploitable flaw allows a low-privileged attacker with network access to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.
- CVE-2026-34272Medium
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Affects versions 9.0.0-9.6.0. An easily exploitable flaw allows a low-privileged attacker with network access to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.
- CVE-2026-34271Medium
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin) affects versions 8.0.0-8.0.45, 8.4.0-8.4.8, and 9.0.0-9.6.0. An easily exploitable vulnerability allows a low privileged attacker with network access via multiple protocols to compromise MySQL Server, resulting in a hang or frequently repeatable crash (complete DOS).
- CVE-2026-34270Medium
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.
- CVE-2026-34267Medium
A vulnerability in Oracle MySQL Server (Server: Optimizer component) affects versions 8.0.0-8.0.45. An easily exploitable flaw allows a high-privileged attacker with network access via multiple protocols to cause a hang or frequently repeatable crash of MySQL Server (complete DoS). CVSS 3.1 Base Score is 4.9 (availability impact).
- CVE-2026-22017Medium
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Affects versions 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. An easily exploitable flaw allows a low-privileged attacker with network access to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.
- CVE-2026-22015Medium
Vulnerability in Oracle MySQL Server (Server: Information Schema component) affects versions 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. A low-privileged attacker with network access can easily exploit it to gain unauthorized read access to a subset of MySQL Server data.
- CVE-2026-22009Medium
A vulnerability in Oracle MySQL Server (component: Server: Optimizer) affects versions 8.0.0-8.0.45, 8.4.0-8.4.8, and 9.0.0-9.6.0. A low-privileged attacker with network access can cause a hang or frequently repeatable crash, resulting in a complete denial of service (DoS) of MySQL Server.
- CVE-2026-22005Medium
A vulnerability in Oracle MySQL's MySQL Server product (component: Server: Optimizer) affects versions 8.0.0-8.0.45, 8.4.0-8.4.8, and 9.0.0-9.6.0. An easily exploitable flaw allows a high-privileged attacker with network access to cause a hang or frequently repeatable crash (complete DoS) of MySQL Server.
- CVE-2026-22004Medium
A vulnerability in Oracle MySQL's MySQL Server product (component: InnoDB) affects versions 8.0.0-8.0.45, 8.4.0-8.4.8, and 9.0.0-9.6.0. An easily exploitable flaw allows a high-privileged attacker with network access to cause a hang or frequently repeatable crash (complete DoS) of MySQL Server.
- CVE-2026-22002Medium
A vulnerability in Oracle MySQL's MySQL Server product (component: Server: Optimizer) affects versions 8.0.0-8.0.45, 8.4.0-8.4.8, and 9.0.0-9.6.0. An easily exploitable flaw allows a high-privileged attacker with network access to cause a hang or frequently repeatable crash (complete DoS) of MySQL Server.
- CVE-2026-22001Low
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Supported versions affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. An easily exploitable vulnerability allows a high privileged attacker with network access to gain unauthorized read access to a subset of MySQL Server data.
- CVE-2026-21998Medium
A vulnerability in Oracle MySQL's MySQL Server product (component: Server: Optimizer) affects versions 8.0.0-8.0.45, 8.4.0-8.4.8, and 9.0.0-9.6.0. An easily exploitable flaw allows a high-privileged attacker with network access to cause a hang or frequently repeatable crash (complete DoS) of MySQL Server.
- CVE-2025-53069Medium
A vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services). Affected versions are 8.0.0-8.0.43, 8.4.0-8.4.6, and 9.0.0-9.4.0. Easily exploitable vulnerability allows a high privileged attacker with network access via multiple protocols to compromise MySQL Server.
- CVE-2025-53062Medium
Vulnerability in Oracle MySQL Server (component: InnoDB). Affected versions are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows a high privileged attacker with network access via multiple protocols to compromise MySQL Server, resulting in unauthorized ability to cause a hang or frequently repeatable crash (complete DoS).
- CVE-2025-53054Medium
A vulnerability in Oracle MySQL Server (InnoDB component) affects versions 8.0.0-8.0.43, 8.4.0-8.4.6, and 9.0.0-9.4.0. A high-privileged authenticated attacker with network access can cause a hang or repeatable crash (complete DoS) and perform unauthorized data modifications.
- CVE-2025-53053Medium
A vulnerability in Oracle MySQL Server (Server: DML component) affects versions 8.0.0-8.0.43, 8.4.0-8.4.6, and 9.0.0-9.4.0. A high-privileged authenticated attacker with network access can cause a hang or repeatable crash (complete DoS) and perform unauthorized data modifications.
- CVE-2025-53045Medium
Vulnerability in Oracle MySQL Server (component: InnoDB). Affected versions are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows a high privileged attacker with network access via multiple protocols to compromise MySQL Server, resulting in unauthorized ability to cause a hang or frequently repeatable crash (complete DoS).
- CVE-2025-53044Medium
Vulnerability in Oracle MySQL Server (component: InnoDB). Affected versions are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows a high privileged attacker with network access via multiple protocols to compromise MySQL Server, resulting in unauthorized ability to cause a hang or frequently repeatable crash (complete DoS).
- CVE-2025-53042Medium
A vulnerability in MySQL Server (component: Server: Optimizer) affects versions 8.0.0-8.0.43, 8.4.0-8.4.6, and 9.0.0-9.4.0. A high-privileged attacker with network access can cause a hang or frequent crashes (complete DoS) of MySQL Server. CVSS 4.9.
- CVE-2025-53040Medium
Vulnerability in Oracle MySQL Server (component: Server: Optimizer). Affected versions are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows a high privileged attacker with network access via multiple protocols to compromise MySQL Server, resulting in unauthorized ability to cause a hang or frequently repeatable crash (complete DoS).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

