Security Vulnerabilities (CVE) Fixed in MariaDB Enterprise Server

This page contains a full list of CVEs fixed in all versions and series of MariaDB Enterprise Server.

The list is updated continuously. CVEs may be added retroactively to already-released versions, as vulnerabilities can be reported to and assigned by CVE Numbering Authorities (CNAs) after the corresponding fix has been released. As a result, a release may receive additional CVE entries over time even after it has been published.

Table of Fixed Security Vulnerabilities

CVE ID (with cve.org link)	CVE Published	CVSS base score (v3.1)	Enterprise Server Releases
CVE-2026-3494	2026-03-03	4.3	11.8.8-5 (2026-06-26), 11.4.12-9 (2026-06-26), 10.6.27-23 (2026-06-26)
CVE-2026-44173	2026-06-12	5.0	11.8.8-5 (2026-06-26), 11.4.12-9 (2026-06-26), 10.6.27-23 (2026-06-26)
CVE-2026-44172	2026-06-12	5.0	11.8.8-5 (2026-06-26), 11.4.12-9 (2026-06-26), 10.6.27-23 (2026-06-26)
CVE-2026-44171	2026-06-12	6.3	11.8.8-5 (2026-06-26), 11.4.12-9 (2026-06-26), 10.6.27-23 (2026-06-26)
CVE-2026-44170	2026-06-12	5.0	11.8.8-5 (2026-06-26), 11.4.12-9 (2026-06-26), 10.6.27-23 (2026-06-26)
CVE-2026-44169	2026-06-12	4.3	11.8.8-5 (2026-06-26), 11.4.12-9 (2026-06-26)
CVE-2026-49261	2026-06-11	10.0	11.8.6-4 (2026-06-02), 11.4.10-8 (2026-06-02), 10.6.25-22 (2026-06-02)
CVE-2026-48165	2026-06-12	8.0	11.8.6-4 (2026-06-02), 11.4.10-8 (2026-06-02), 10.6.25-22 (2026-06-02)
CVE-2026-48163	2026-06-12	8.0	11.8.6-4 (2026-06-02), 11.4.10-8 (2026-06-02), 10.6.25-22 (2026-06-02)
CVE-2026-44168	2026-06-12	8.0	11.8.6-4 (2026-06-02), 11.4.10-8 (2026-06-02), 10.6.25-22 (2026-06-02)
CVE-2026-32710	2026-03-20	8.6	11.8.6-3 (2026-03-17), 11.4.10-7 (2026-03-17), 10.6.27-23 (2026-06-26)
CVE-2026-35549	2026-04-03	6.5	11.8.6-3 (2026-03-17), 11.4.10-7 (2026-03-17)
CVE-2026-34303	2026-04-21	6.5	11.8.6-3 (2026-03-17), 11.4.10-7 (2026-03-17)
CVE-2026-21968	2026-01-20	6.5	11.8.5-2 (2025-12-11), 11.4.9-6 (2025-12-11), 10.6.24-20 (2025-12-11)
CVE-2025-13699	2025-12-23	7.0	11.8.5-2 (2025-12-11), 11.4.9-6 (2025-12-11), 10.6.24-20 (2025-12-11)
CVE-2025-30693	2025-04-15	5.5	11.4.7-4 (2025-06-11), 10.6.22-18 (2025-06-11), 10.5.29-23 (2025-06-11)
CVE-2023-52969	2025-03-08	4.9	11.4.7-4 (2025-06-11), 10.6.22-18 (2025-06-11), 10.5.29-23 (2025-06-11)
CVE-2023-52970	2025-03-08	4.9	11.4.7-4 (2025-06-11), 10.6.22-18 (2025-06-11), 10.5.29-23 (2025-06-11)
CVE-2023-52971	2025-03-08	4.9	11.4.7-4 (2025-06-11)
CVE-2025-30722	2025-04-15	5.3	11.4.7-4 (2025-06-11), 10.6.22-18 (2025-06-11), 10.5.29-23 (2025-06-11)
CVE-2025-21490	2025-01-21	4.9	11.4.5-3 (2025-03-19), 10.6.21-17 (2025-03-19), 10.5.28-22 (2025-03-19)
CVE-2024-21096	2024-04-16	4.9	10.6.18-14 (2024-06-11), 10.5.25-19 (2024-06-11)
CVE-2023-52968	2025-03-08	4.9	10.6.17-13 (2024-04-24), 10.5.24-18 (2024-03-11), 10.4.33-23 (2024-03-11)
CVE-2023-22084	2023-10-17	4.9	10.6.16-11 (2023-12-12), 10.5.23-17 (2023-12-12), 10.4.32-22 (2023-12-12)
CVE-2022-47015	2023-01-20	N/A (Medium) #1	10.5.21-15 (2023-06-13), 10.4.30-20 (2023-06-13), 10.3.39-20 (2023-06-13)
CVE-2022-47015	2023-01-20	N/A (Medium) #1	10.6.12-8 (2023-05-24)
CVE-2023-5157	2023-09-26	7.5	10.6.9-5 (2022-09-12), 10.5.17-12 (2022-09-12), 10.4.26-17 (2022-09-12)
CVE-2018-25032	2022-03-25	7.5	10.6.9-5 (2022-09-12), 10.5.17-12 (2022-09-12), 10.4.26-17 (2022-09-12), 10.3.36-17 (2022-09-12)
CVE-2022-32091	2022-07-01	6.5	10.6.9-5 (2022-09-12), 10.5.17-12 (2022-09-12), 10.4.26-17 (2022-09-12), 10.3.36-17 (2022-09-12)
CVE-2022-32089	2022-07-01	6.5	10.6.9-5 (2022-09-12), 10.5.17-12 (2022-09-12), 10.4.26-17 (2022-09-12)
CVE-2022-32084	2022-07-01	6.5	10.6.9-5 (2022-09-12), 10.5.17-12 (2022-09-12), 10.4.26-17 (2022-09-12), 10.3.36-17 (2022-09-12)
CVE-2022-32082	2022-07-01	6.5	10.6.9-5 (2022-09-12), 10.5.17-12 (2022-09-12)
CVE-2022-32081	2022-07-01	6.5	10.6.9-5 (2022-09-12), 10.5.17-12 (2022-09-12), 10.4.26-17 (2022-09-12)
CVE-2022-27457	2022-04-14	7.5	10.6.8-4 (2022-06-13), 10.5.16-11 (2022-06-13), 10.4.25-16 (2022-06-13)
CVE-2022-27456	2022-04-14	7.5	10.6.8-4 (2022-06-13), 10.5.16-11 (2022-06-13), 10.4.25-16 (2022-06-13), 10.3.35-16 (2022-06-13)
CVE-2022-27455	2022-04-14	7.5	10.6.8-4 (2022-06-13), 10.5.16-11 (2022-06-13), 10.4.25-16 (2022-06-13)
CVE-2022-27452	2022-04-14	7.5	10.6.8-4 (2022-06-13), 10.5.16-11 (2022-06-13), 10.4.25-16 (2022-06-13), 10.3.35-16 (2022-06-13)
CVE-2022-27451	2022-04-14	7.5	10.6.8-4 (2022-06-13), 10.5.16-11 (2022-06-13), 10.4.25-16 (2022-06-13)
CVE-2022-27449	2022-04-14	7.5	10.6.8-4 (2022-06-13), 10.5.16-11 (2022-06-13), 10.4.25-16 (2022-06-13), 10.3.35-16 (2022-06-13)
CVE-2022-27448	2022-04-14	7.5	10.6.8-4 (2022-06-13), 10.5.16-11 (2022-06-13), 10.4.25-16 (2022-06-13), 10.3.35-16 (2022-06-13)
CVE-2022-27447	2022-04-14	7.5	10.6.8-4 (2022-06-13), 10.5.16-11 (2022-06-13), 10.4.25-16 (2022-06-13), 10.3.35-16 (2022-06-13)
CVE-2022-27446	2022-04-14	7.5	10.6.8-4 (2022-06-13), 10.5.16-11 (2022-06-13), 10.4.25-16 (2022-06-13)
CVE-2022-27445	2022-04-14	7.5	10.6.8-4 (2022-06-13), 10.5.16-11 (2022-06-13), 10.4.25-16 (2022-06-13), 10.3.35-16 (2022-06-13)
CVE-2022-27444	2022-04-14	7.5	10.6.8-4 (2022-06-13), 10.5.16-11 (2022-06-13), 10.4.25-16 (2022-06-13)
CVE-2022-27387	2022-04-12	7.5	10.6.8-4 (2022-06-13), 10.5.16-11 (2022-06-13), 10.4.25-16 (2022-06-13), 10.3.35-16 (2022-06-13)
CVE-2022-27386	2022-04-12	7.5	10.6.8-4 (2022-06-13), 10.5.16-11 (2022-06-13), 10.4.25-16 (2022-06-13), 10.3.35-16 (2022-06-13)
CVE-2022-27384	2022-04-12	7.5	10.6.8-4 (2022-06-13), 10.5.16-11 (2022-06-13), 10.4.25-16 (2022-06-13), 10.3.35-16 (2022-06-13)
CVE-2022-27383	2022-04-12	7.5	10.6.8-4 (2022-06-13), 10.5.16-11 (2022-06-13), 10.4.25-16 (2022-06-13), 10.3.35-16 (2022-06-13)
CVE-2022-27382	2022-04-12	7.5	10.6.8-4 (2022-06-13), 10.5.16-11 (2022-06-13), 10.4.25-16 (2022-06-13)
CVE-2022-27381	2022-04-12	7.5	10.6.8-4 (2022-06-13), 10.5.16-11 (2022-06-13), 10.4.25-16 (2022-06-13), 10.3.35-16 (2022-06-13)
CVE-2022-27380	2022-04-12	7.5	10.6.8-4 (2022-06-13), 10.5.16-11 (2022-06-13), 10.4.25-16 (2022-06-13), 10.3.35-16 (2022-06-13)
CVE-2022-27379	2022-04-12	7.5	10.6.8-4 (2022-06-13), 10.5.16-11 (2022-06-13), 10.4.25-16 (2022-06-13), 10.3.35-16 (2022-06-13)
CVE-2022-27378	2022-04-12	7.5	10.6.8-4 (2022-06-13), 10.5.16-11 (2022-06-13), 10.4.25-16 (2022-06-13), 10.3.35-16 (2022-06-13)
CVE-2022-27377	2022-04-12	7.5	10.6.8-4 (2022-06-13), 10.5.16-11 (2022-06-13), 10.4.25-16 (2022-06-13), 10.3.35-16 (2022-06-13)
CVE-2022-27376	2022-04-12	7.5	10.6.8-4 (2022-06-13), 10.5.16-11 (2022-06-13), 10.4.25-16 (2022-06-13), 10.3.35-16 (2022-06-13)
CVE-2022-21451	2022-04-19	7.5	10.6.8-4 (2022-06-13), 10.5.16-11 (2022-06-13), 10.4.25-16 (2022-06-13)
CVE-2022-32088	2022-07-01	6.5	10.6.8-4 (2022-06-13), 10.5.16-11 (2022-06-13), 10.4.25-16 (2022-06-13), 10.3.35-16 (2022-06-13)
CVE-2022-32087	2022-07-01	6.5	10.6.8-4 (2022-06-13), 10.5.16-11 (2022-06-13), 10.4.25-16 (2022-06-13), 10.3.35-16 (2022-06-13)
CVE-2022-32086	2022-07-01	6.5	10.6.8-4 (2022-06-13), 10.5.16-11 (2022-06-13), 10.4.25-16 (2022-06-13)
CVE-2022-32085	2022-07-01	6.5	10.6.8-4 (2022-06-13), 10.5.16-11 (2022-06-13), 10.4.25-16 (2022-06-13), 10.3.35-16 (2022-06-13)
CVE-2022-32083	2022-07-01	6.5	10.6.8-4 (2022-06-13), 10.5.16-11 (2022-06-13), 10.4.25-16 (2022-06-13), 10.3.35-16 (2022-06-13)
CVE-2021-46669	2022-02-01	6.5	10.6.8-4 (2022-06-13), 10.5.16-11 (2022-06-13), 10.4.25-16 (2022-06-13), 10.3.35-16 (2022-06-13)
CVE-2022-21427	2022-04-19	4.9	10.4.25-16 (2022-06-13), 10.3.35-16 (2022-06-13)
CVE-2021-46668	2022-02-01	5.5	10.6.7-3 (2022-03-14), 10.5.15-10 (2022-03-14), 10.4.24-15 (2022-03-14), 10.3.34-15 (2022-03-14), 10.2.43-15 (2022-03-14)
CVE-2021-46665	2022-02-01	5.5	10.6.7-3 (2022-03-14), 10.5.15-10 (2022-03-14), 10.4.24-15 (2022-03-14), 10.3.34-15 (2022-03-14), 10.2.43-15 (2022-03-14)
CVE-2021-46664	2022-02-01	5.5	10.6.7-3 (2022-03-14), 10.5.15-10 (2022-03-14), 10.4.24-15 (2022-03-14), 10.3.34-15 (2022-03-14), 10.2.43-15 (2022-03-14)
CVE-2021-46663	2022-02-01	5.5	10.6.7-3 (2022-03-14), 10.5.15-10 (2022-03-14), 10.4.24-15 (2022-03-14), 10.3.34-15 (2022-03-14), 10.2.43-15 (2022-03-14)
CVE-2021-46661	2022-02-01	5.5	10.6.7-3 (2022-03-14), 10.5.15-10 (2022-03-14), 10.4.24-15 (2022-03-14), 10.3.34-15 (2022-03-14), 10.2.43-15 (2022-03-14)
CVE-2021-46659	2022-01-29	5.5	10.6.7-3 (2022-03-14), 10.5.15-10 (2022-03-14), 10.4.24-15 (2022-03-14), 10.3.34-15 (2022-03-14), 10.2.43-15 (2022-03-14)
CVE-2022-21595	2022-10-18	4.4	10.6.7-3 (2022-03-14), 10.5.15-10 (2022-03-14), 10.4.24-15 (2022-03-14), 10.3.34-15 (2022-03-14), 10.2.43-15 (2022-03-14)
CVE-2022-27385	2022-04-12	7.5	10.6.5-2 (2021-12-13), 10.5.13-9 (2021-12-13), 10.4.22-14 (2021-12-13), 10.3.32-14 (2021-12-13)
CVE-2021-46667	2022-02-01	7.5	10.6.5-2 (2021-12-13), 10.5.13-9 (2021-12-13), 10.4.22-14 (2021-12-13), 10.3.32-14 (2021-12-13), 10.2.41-14 (2021-12-13)
CVE-2022-31624	2022-05-25	6.5	10.6.5-2 (2021-12-13), 10.5.13-9 (2021-12-13), 10.4.22-14 (2021-12-13), 10.3.32-14 (2021-12-13), 10.2.41-14 (2021-12-13)
CVE-2021-46662	2022-02-01	5.5	10.6.5-2 (2021-12-13), 10.5.13-9 (2021-12-13), 10.4.22-14 (2021-12-13), 10.3.32-14 (2021-12-13)
CVE-2021-35604	2021-10-20	5.5	10.5.13-9 (2021-12-13), 10.4.22-14 (2021-12-13), 10.3.32-14 (2021-12-13), 10.2.41-14 (2021-12-13)
CVE-2021-2389	2021-07-20	5.9	10.5.12-8 (2021-09-14), 10.4.21-13 (2021-09-14), 10.3.31-13 (2021-09-14), 10.2.40-13 (2021-09-14)
CVE-2021-46666	2022-02-01	5.5	10.5.12-8 (2021-09-14), 10.4.21-13 (2021-09-14), 10.3.31-13 (2021-09-14), 10.2.40-13 (2021-09-14)
CVE-2021-46658	2022-01-29	5.5	10.5.12-8 (2021-09-14), 10.4.21-13 (2021-09-14), 10.3.31-13 (2021-09-14), 10.2.40-13 (2021-09-14)
CVE-2021-46657	2022-01-29	5.5	10.5.12-8 (2021-09-14), 10.4.21-13 (2021-09-14), 10.3.31-13 (2021-09-14), 10.2.40-13 (2021-09-14)
CVE-2021-2372	2021-07-20	4.4	10.5.12-8 (2021-09-14), 10.4.21-13 (2021-09-14), 10.3.31-13 (2021-09-14), 10.2.40-13 (2021-09-14)
CVE-2021-46658	2022-01-29	5.5	10.6.4-1 (2021-08-26)
CVE-2021-2166	2021-04-22	4.9	10.5.10-7 (2021-06-14), 10.4.19-12 (2021-06-14), 10.3.29-12 (2021-06-14), 10.2.38-12 (2021-06-14)
CVE-2021-2154	2021-04-22	4.9	10.5.10-7 (2021-06-14), 10.4.19-12 (2021-06-14), 10.3.29-12 (2021-06-14), 10.2.38-12 (2021-06-14)
CVE-2021-27928	2021-03-19	N/A (Critical) #1	10.5.9-6 (2021-03-15), 10.4.18-11 (2021-03-15), 10.3.28-11 (2021-03-15), 10.2.37-11 (2021-03-15)
CVE-2020-14765	2020-10-21	6.5	10.5.8-5 (2020-12-14), 10.4.17-10 (2020-12-14), 10.3.27-10 (2020-12-14), 10.2.36-10 (2020-12-14)
CVE-2022-21427	2022-04-19	4.9	10.5.8-5 (2020-12-14)
CVE-2020-14812	2020-10-21	4.9	10.5.8-5 (2020-12-14), 10.4.17-10 (2020-12-14), 10.3.27-10 (2020-12-14), 10.2.36-10 (2020-12-14)
CVE-2020-14789	2020-10-21	4.9	10.5.8-5 (2020-12-14), 10.4.17-10 (2020-12-14), 10.3.27-10 (2020-12-14), 10.2.36-10 (2020-12-14)
CVE-2020-14776	2020-10-21	4.9	10.5.8-5 (2020-12-14), 10.4.17-10 (2020-12-14), 10.3.27-10 (2020-12-14), 10.2.36-10 (2020-12-14)
CVE-2020-28912	2020-12-24	N/A (Critical) #1	10.5.8-5 (2020-12-14), 10.4.17-10 (2020-12-14), 10.3.27-10 (2020-12-14), 10.2.36-10 (2020-12-14)
CVE-2020-15180	2021-05-27	N/A (Critical) #1	10.5.6-4 (2020-10-07), 10.4.15-9 (2020-10-07), 10.3.25-9 (2020-10-07), 10.2.34-9 (2020-10-07)
CVE-2021-2022	2021-01-20	4.4	10.5.5-3 (2020-09-08), 10.4.14-8 (2020-09-08), 10.3.24-8 (2020-09-08), 10.2.33-8 (2020-09-08)
CVE-2020-2760	2020-04-15	5.5	10.4.13-7 (2020-06-08), 10.3.23-7 (2020-06-08), 10.2.32-7 (2020-06-08)
CVE-2020-2752	2020-04-15	5.3	10.4.13-7 (2020-06-08), 10.3.23-7 (2020-06-08), 10.2.32-7 (2020-06-08)
CVE-2020-2814	2020-04-15	4.9	10.4.13-7 (2020-06-08), 10.3.23-7 (2020-06-08), 10.2.32-7 (2020-06-08)
CVE-2020-2812	2020-04-15	4.9	10.4.13-7 (2020-06-08), 10.3.23-7 (2020-06-08), 10.2.32-7 (2020-06-08)
CVE-2020-13249	2020-05-20	N/A (Medium) #1	10.4.13-7 (2020-06-08), 10.3.23-7 (2020-06-08), 10.2.32-7 (2020-06-08)
CVE-2020-7221	2020-02-04	7.8	10.4.12-6 (2020-03-02)
CVE-2020-2574	2020-01-15	5.9	10.4.12-6 (2020-03-02), 10.3.22-6 (2020-03-02), 10.2.31-6 (2020-03-02)
CVE-2020-2780	2020-04-15	6.5	10.4.10-4 (2019-11-18), 10.3.20-4 (2019-11-18), 10.2.29-4 (2019-11-18)
CVE-2019-2974	2019-10-16	6.5	10.4.10-4 (2019-11-18), 10.3.20-4 (2019-11-18), 10.2.29-4 (2019-11-18)
CVE-2019-2938	2019-10-16	4.4	10.4.10-4 (2019-11-18), 10.3.20-4 (2019-11-18), 10.2.29-4 (2019-11-18)
CVE-2019-2805	2019-07-23	6.5	10.4.7-2 (2019-08-19), 10.3.17-2 (2019-08-19), 10.2.26-2 (2019-08-19)
CVE-2019-2740	2019-07-23	6.5	10.4.7-2 (2019-08-19), 10.3.17-2 (2019-08-19), 10.2.26-2 (2019-08-19)
CVE-2019-2758	2019-07-23	5.5	10.4.7-2 (2019-08-19), 10.3.17-2 (2019-08-19), 10.2.26-2 (2019-08-19)
CVE-2019-2739	2019-07-23	5.1	10.4.7-2 (2019-08-19), 10.3.17-2 (2019-08-19), 10.2.26-2 (2019-08-19)
CVE-2019-2737	2019-07-23	4.9	10.4.7-2 (2019-08-19), 10.3.17-2 (2019-08-19), 10.2.26-2 (2019-08-19)
CVE-2021-2007	2021-01-20	3.7	10.4.7-2 (2019-08-19), 10.3.17-2 (2019-08-19), 10.2.26-2 (2019-08-19)
CVE-2020-2922	2020-04-15	3.7	10.4.7-2 (2019-08-19), 10.3.17-2 (2019-08-19), 10.2.26-2 (2019-08-19)

#1:

MariaDB CVEs are assigned a word rating instead of a CVSS base score. See the MariaDB Engineering Policy for details.

What CVEs are listed on this page?

This page provides a cross-reference for all CVEs addressed through a release of MariaDB Enterprise Server.

Enterprise Server Benefits

MariaDB Enterprise Server is an enhanced, hardened, and secured product with:

• Enterprise-grade testing to drive a low defect rate

• Increased code stability through restricted release of new functionality

• Reduced risk from untested or incompatible features through inclusion of only features with level 3 support (Engineering code-level support) from MariaDB Corporation

• Optimized configuration defaults

• Premium features to meet enterprise scaling and operations requirements

• Documentation maintained by MariaDB Corporation

_{This page is: Copyright © 2025 MariaDB. All rights reserved.}