CVE-2025-21525

Summary

CVE-2025-21525 is a newly discovered vulnerability in the Oracle MySQL Server component (DDL) with a base score of 4.9 in CVSS 3.1. Affected versions include 8.0.39 and prior, 8.4.2 and prior, and 9.0.1 and prior. This easily exploitable issue allows high-privileged attackers with network access to cause a hang or frequently repeatable crash of the MySQL Server, resulting in a denial-of-service (DoS) attack. The vulnerability can be exploited through multiple protocols, making it a significant threat for organizations using the above-mentioned MySQL Server versions.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.