CVE-2025-21518

Summary

CVE-2025-21518 is a vulnerability affecting the Optimizer component of Oracle MySQL Server versions 8.0.40 and prior, 8.4.3 and prior, and 9.1.0 and prior. This issue allows a low-privileged attacker with network access to exploit the system via multiple protocols. Successfully exploited vulnerabilities can lead to a hang or frequent crashes of the MySQL Server, causing a Denial of Service (DoS) attack. The base score of this vulnerability, according to the Common Vulnerability Scoring System version 3.1, is 6.5, with a high impact on availability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.