CVE-2025-21523

Summary

CVE-2025-21523 is a vulnerability affecting the InnoDB component of Oracle MySQL Server. Affected versions include 8.0.40 and prior, 8.4.3 and prior, and 9.1.0 and prior. This issue enables a high privileged attacker, with network access, to cause a denial-of-service (DoS) by exploiting it via multiple protocols. Successfully attacking this vulnerability can result in a MySQL Server hang or frequent crashes, leading to significant availability impacts. According to the Common Vulnerability Scoring System (CVSS), the base score is 4.9. The CVSS vector is (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.