CVE-2025-53053: Medium severity Oracle MySQL Server vulnerability
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-53053?
CVE-2025-53053 is considered to be an easily exploitable vulnerability that allows a high privileged attacker to compromise MySQL Server.
How do I fix CVE-2025-53053?
To remediate CVE-2025-53053, you should upgrade your MySQL Server to a version that is not affected, e.g., versions higher than 8.0.43, 8.4.6, and 9.4.0.
Which versions of MySQL Server are affected by CVE-2025-53053?
CVE-2025-53053 affects MySQL Server versions 8.0.0 to 8.0.43, 8.4.0 to 8.4.6, and 9.0.0 to 9.4.0.
What types of networks are vulnerable due to CVE-2025-53053?
CVE-2025-53053 allows attackers with network access via multiple protocols to exploit the vulnerability in MySQL Server.
Who can be affected by CVE-2025-53053?
Any organization or individual using the affected versions of Oracle MySQL Server could be at risk from CVE-2025-53053.