VersionDrift
Product

Is MariaDB 11.8.4 affected?

Nov 6, 2025 · Release notes ↗

CVSS 10.0

19 known vulnerabilities affect 11.8.4 (highest CVSS 10.0).

17 newer releases in its track, up to 13.1.1. What changed up to 13.1.1

Vulnerabilities affecting 11.8.4

  • 10.0
    CVE-2026-49261 MariaDB server is a community developed fork of MySQL server. Versions 10.6.1 through 10.6.26, 10.11.1 through 10.11.17, 11.4.1 through 11.4.11, 11.8.1 through 11.8.7, and 12.3.1 with `wsrep_notif… fixed in 11.8.8
  • 9.8
    CVE-2026-44170 MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26, 10.11.1 to before 10.11.17, 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, Mari… fixed in 11.8.7
  • 8.5
    CVE-2026-107815 MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the CONNECT engine's DOS table type used an incorrect boundar… fixed in 11.8.9
  • 8.5
    CVE-2026-32710 MariaDB server is a community developed fork of MySQL server. An authenticated user can crash MariaDB versions 11.4 before 11.4.10 and 11.8 before 11.8.6 via a bug in JSON_SCHEMA_VALID() function.… fixed in 11.8.6
  • 8.4
    CVE-2026-107818 MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the mariadb.service unit used /run/mysqld/wsrep-new-cluster d… fixed in 11.8.9
  • 8.4
    CVE-2026-107814 MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB RPM packages created the dedicated mysql service acco… fixed in 11.8.9
  • 8.0
    CVE-2026-107821 MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB insufficiently validated counts, offsets, lengths, an… fixed in 11.8.9
  • 8.0
    CVE-2026-48163 MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.27, 10.11.1 to before 10.11.18, 11.4.1 to before 11.4.12, 11.8.1 to before 11.8.8, and 12.3.1, duri… fixed in 11.8.8
  • 8.0
    CVE-2026-48165 MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.27, 10.11.1 to before 10.11.18, 11.4.1 to before 11.4.12, 11.8.1 to before 11.8.8, and 12.3.1, a hi… fixed in 11.8.8
  • 8.0
    CVE-2026-44168 MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26, 10.11.1 to before 10.11.17, 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, duri… fixed in 11.8.7
  • 7.2
    CVE-2026-107823 MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the MariaDB view FRM parser did not safely encode embedded ne… fixed in 11.8.9
  • 6.5
    CVE-2026-35549 An issue was discovered in MariaDB Server before 11.4.10, 11.5.x through 11.8.x before 11.8.6, and 12.x before 12.2.2. If the caching_sha2_password authentication plugin is installed, and some user… fixed in 11.8.6
  • 6.4
    CVE-2026-107822 MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB's ACL cache could generate the same database-privileg… fixed in 11.8.9
  • 6.4
    CVE-2026-107816 MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the qc_info plugin could be confused by a query containing em… fixed in 11.8.9
  • 6.3
    CVE-2026-44171 MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26, 10.11.1 to before 10.11.17, 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, mbst… fixed in 11.8.7
  • 5.0
    CVE-2026-44173 MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26, 10.11.1 to before 10.11.17, 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, Mari… fixed in 11.8.7
  • 4.4
    CVE-2026-107817 MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the mysql_json plugin assumed that imported MySQL tables cont… fixed in 11.8.9
  • 4.3
    CVE-2026-44169 MariaDB server is a community developed fork of MySQL server. From versions 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, a user getting EXECUTE access to a stored routine via a ro… fixed in 11.8.7
  • 4.3
    CVE-2026-3494 In MariaDB server version through 11.8.5, when server audit plugin is enabled with server_audit_events variable configured with QUERY_DCL, QUERY_DDL, or QUERY_DML filtering, if an authenticated dat…

Newer releases

13.1.1Sep 14, 202611.8.4 → 13.1.1
13.0.2Sep 14, 202611.8.4 → 13.0.2
13.0.1May 29, 202611.8.4 → 13.0.1
12.3.3Aug 24, 202611.8.4 → 12.3.3
12.3.2May 28, 202611.8.4 → 12.3.2
12.3.1Feb 12, 202611.8.4 → 12.3.1
12.2.2Feb 12, 202611.8.4 → 12.2.2
12.2.1Nov 21, 202511.8.4 → 12.2.1
12.1.2Nov 18, 202511.8.4 → 12.1.2
12.1.1Aug 7, 202511.8.4 → 12.1.1
12.0.2Aug 7, 202511.8.4 → 12.0.2
12.0.1Jun 5, 202511.8.4 → 12.0.1
11.8.9Aug 24, 202611.8.4 → 11.8.9
11.8.8May 27, 202611.8.4 → 11.8.8
11.8.7May 14, 202611.8.4 → 11.8.7
See how far your stack has drifted from upstream. Release data from vendors’ own sources · feed under CC BY 4.0 · Code under AGPL-3.0 Settings Feed status