CVE-2025-50076

Severity
6.5MEDIUM
EPSS
0.1%
top 68.80%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedJul 15

Description

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.0-8.0.25. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 2.8 | Impact: 3.6

Affected Packages3 packages

CVEListV5oracle_corporation/mysql_server8.0.08.0.25
NVDoracle/mysql8.0.08.0.42
Ubuntumysql-8.0< 8.0.26-0ubuntu1

🔴Vulnerability Details

3
CVEList
CVE-2025-50076: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML)2025-07-15
GHSA
GHSA-49p8-j9j6-2335: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML)2025-07-15
OSV
CVE-2025-50076: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML)2025-07-15

📋Vendor Advisories

5
Oracle
Oracle Oracle MySQL Risk Matrix: Server: DML — CVE-2025-500762025-07-15
Red Hat
mysql: DML unspecified vulnerability (CPU Jul 2025)2025-07-15
Microsoft
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.0-8.0.25. Easily exploitable vulnerability allows low privileged attac2025-07-08
Debian
CVE-2025-50076: mysql-8.0 - Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DM...2025
Microsoft
vt: prevent kernel-infoleak in con_font_get()2024-10-08
CVE-2025-50076 (MEDIUM CVSS 6.5) | Vulnerability in the MySQL Server p | cvebase.io