- Description
- MariaDB server is a community developed fork of MySQL server. From 12.3.1 until 12.3.3 and 13.0.2, SYS_REFCURSOR handling is affected because cursor-array reallocation can leave stale references in routine contexts. A low-privileged attacker can open a large number of SYS_REFCURSORs and then fetch one to trigger a use-after-free that can enable remote code execution when combined with another vulnerability. This issue is fixed in versions 12.3.3 and 13.0.2.
- Source
- security-advisories@github.com
- NVD status
- Analyzed
- Products
- mariadb
CVSS 3.1
- Type
- Secondary
- Base score
- 9.9
- Impact score
- 6
- Exploitability score
- 3.1
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
- Severity
- CRITICAL
- security-advisories@github.com
- CWE-416
- Hype score
- Not currently trending
Warning: 3 critical vulnerabilities in #MariaDB Server may allow low-privileged attackers to access or corrupt data, cause crashes, or execute code. CVE-2026-92262, CVE-2026-85746 & CVE-2026-85748 CVSS(3.1): 9.9. Read the advisory https://t.co/pDJqanQFw0 and #Patch #Patch #Pa
@CCBalert
19 Oct 2026
291 Impressions
0 Retweets
2 Likes
0 Bookmarks
1 Reply
0 Quotes
ExploitGrid Daily Digest 🚨 Top CVEs: CVE-2026-94169 (CVSS: 10) Theme-one CVE-2026-95182 (CVSS: 10) CVE-2026-85746 (CVSS: 9.9) MariaDB CVE-2026-85748 (CVSS: 9.9) MariaDB CVE-2026-92262 (CVSS: 9.9) MariaDB ..🧵👇
@exploitgrid
17 Oct 2026
64 Impressions
1 Retweet
0 Likes
0 Bookmarks
1 Reply
0 Quotes
⚠️ MariaDB fixes three critical flaws that let low-privileged users compromise the database server CVE-2026-85746 · CVE-2026-85748 MariaDB has fixed three vulnerabilities rated CVSS 9.9 (CVE-2026-85746, CVE-2026-85748 and… #CVE #MariaDB #infosec https://t.co/GEC0v4ocIK h
@Orbitaley
16 Oct 2026
0 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
[
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
"matchCriteriaId": "E6988F1C-2D11-431B-BBE4-3AA8483627C8",
"versionEndExcluding": "12.3.3",
"versionStartIncluding": "12.3.1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mariadb:mariadb:13.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "E46FBE57-06D5-489E-9ECE-333F5F9AFD06",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
]