| [CVE-2026-86047] MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, SHOW CREATE SERVER, SHOW CREATE USER, and mariadb-dump are affec | High(7.7) | BetroffenDetails (2)1:10.11.18-0+deb12u1 · amd64 · bookworm
Betroffen nvd · mariadb · debian · bookworm 1:10.11.18-0+deb12u1 · arm64 · bookworm
Betroffen nvd · mariadb · debian · bookworm
|
| [CVE-2026-85745] MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, ST_Area reads beyond the allocated buffer when processing invali | Medium(4.3) | BetroffenDetails (2)1:10.11.18-0+deb12u1 · amd64 · bookworm
Betroffen nvd · mariadb · debian · bookworm 1:10.11.18-0+deb12u1 · arm64 · bookworm
Betroffen nvd · mariadb · debian · bookworm
|
| [CVE-2026-85746] MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, ST_AsText can write beyond an allocated output buffer when conve | Critical(9.9) | BetroffenDetails (2)1:10.11.18-0+deb12u1 · amd64 · bookworm
Betroffen nvd · mariadb · debian · bookworm 1:10.11.18-0+deb12u1 · arm64 · bookworm
Betroffen nvd · mariadb · debian · bookworm
|
| [CVE-2026-97380] MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the GRANT PROXY statement treats an IDENTIFIED clause with an em | High(8.8) | BetroffenDetails (2)1:10.11.18-0+deb12u1 · amd64 · bookworm
Betroffen nvd · mariadb · debian · bookworm 1:10.11.18-0+deb12u1 · arm64 · bookworm
Betroffen nvd · mariadb · debian · bookworm
|
| [CVE-2026-85985] MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the CONNECT engine plugin file-access UDFs json_file(), bson_fil | Medium(5.4) | BetroffenDetails (2)1:10.11.18-0+deb12u1 · amd64 · bookworm
Betroffen nvd · mariadb · debian · bookworm 1:10.11.18-0+deb12u1 · arm64 · bookworm
Betroffen nvd · mariadb · debian · bookworm
|
| [CVE-2026-92262] MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the #mysql50# bypass prefix is affected because it allows the #m | Critical(9.9) | BetroffenDetails (2)1:10.11.18-0+deb12u1 · amd64 · bookworm
Betroffen nvd · mariadb · debian · bookworm 1:10.11.18-0+deb12u1 · arm64 · bookworm
Betroffen nvd · mariadb · debian · bookworm
|
| [CVE-2026-107823] MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the MariaDB view FRM parser did not safely encode embedded newli | High(7.2) | BetroffenDetails (2)1:10.11.18-0+deb12u1 · amd64 · bookworm
Betroffen nvd · mariadb · debian · bookworm 1:10.11.18-0+deb12u1 · arm64 · bookworm
Betroffen nvd · mariadb · debian · bookworm
|
| [CVE-2026-107822] MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB's ACL cache could generate the same database-privilege c | Medium(6.4) | BetroffenDetails (2)1:10.11.18-0+deb12u1 · amd64 · bookworm
Betroffen nvd · mariadb · debian · bookworm 1:10.11.18-0+deb12u1 · arm64 · bookworm
Betroffen nvd · mariadb · debian · bookworm
|
| [CVE-2026-107821] MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB insufficiently validated counts, offsets, lengths, and f | High(8) | BetroffenDetails (2)1:10.11.18-0+deb12u1 · amd64 · bookworm
Betroffen nvd · mariadb · debian · bookworm 1:10.11.18-0+deb12u1 · arm64 · bookworm
Betroffen nvd · mariadb · debian · bookworm
|
| [CVE-2026-107818] MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the mariadb.service unit used /run/mysqld/wsrep-new-cluster duri | High(8.4) | BetroffenDetails (2)1:10.11.18-0+deb12u1 · amd64 · bookworm
Betroffen nvd · mariadb · debian · bookworm 1:10.11.18-0+deb12u1 · arm64 · bookworm
Betroffen nvd · mariadb · debian · bookworm
|
| [CVE-2026-107817] MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the mysql_json plugin assumed that imported MySQL tables contain | Medium(4.4) | BetroffenDetails (2)1:10.11.18-0+deb12u1 · amd64 · bookworm
Betroffen nvd · mariadb · debian · bookworm 1:10.11.18-0+deb12u1 · arm64 · bookworm
Betroffen nvd · mariadb · debian · bookworm
|
| [CVE-2026-107816] MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the qc_info plugin could be confused by a query containing embed | Medium(6.4) | BetroffenDetails (2)1:10.11.18-0+deb12u1 · amd64 · bookworm
Betroffen nvd · mariadb · debian · bookworm 1:10.11.18-0+deb12u1 · arm64 · bookworm
Betroffen nvd · mariadb · debian · bookworm
|
| [CVE-2026-107815] MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the CONNECT engine's DOS table type used an incorrect boundary c | High(8.5) | BetroffenDetails (2)1:10.11.18-0+deb12u1 · amd64 · bookworm
Betroffen nvd · mariadb · debian · bookworm 1:10.11.18-0+deb12u1 · arm64 · bookworm
Betroffen nvd · mariadb · debian · bookworm
|
| [CVE-2026-44169] MariaDB server is a community developed fork of MySQL server. From versions 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, a user getting EXECUTE access to a stored routine via a role, | Medium(4.3) | BetroffenDetails (2)1:10.11.18-0+deb12u1 · amd64 · bookworm
Betroffen nvd · mariadb · debian · bookworm; nvd · mariadb · debian · 12 1:10.11.18-0+deb12u1 · arm64 · bookworm
Betroffen nvd · mariadb · debian · bookworm; nvd · mariadb · debian · 12
|