CVE-2025-21490 - Vulnerability Details

Related Threat Clusters

• Multiple Vulnerabilities in Oracle MySQL Server Identified

  A series of vulnerabilities have been identified in the Oracle MySQL Server, affecting versions 8.0.35 and prior, and 8.2.0 and prior. These vulnerabilities, including CVE-2024-20961, CVE-2024-20971, and others, allow…

  18 articles · Updated February 18, 2026
• SUSE and openSUSE Release Security Update for MariaDB Addressing Critical Vulnerabilities

  SUSE and openSUSE have released an important security update for MariaDB, addressing multiple vulnerabilities in versions 10.5.28 and 10.5.29. The updates fix CVE-2025-21490, which allows high privileged attackers to…

  2 articles · Updated December 19, 2025

Recent Intelligence Reports

• CVE-2025-21490 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). — Api.Msrc.Microsoft · February 18, 2026
• SUSE: MariaDB Important Security Update Advisory 2025:4491-1 CVE-2023 — Linuxsecurity · December 19, 2025
• openSUSE: mariadb Important Network Access Issues Advisory 2025:4491 — Linuxsecurity · December 19, 2025

Related Entities