Mysql Connector Odbc
Monthly
Local exploitation of MySQL Connector/ODBC 26.7.0 on Oracle MySQL allows any user with OS-level logon to the affected infrastructure to crash or hang the connector process and read a subset of accessible data. The attack requires no authentication to MySQL Connectors itself and no user interaction, making it trivially executable by any local user or process on the host. No public exploit code has been identified at time of analysis, and exploitation is bounded by the requirement for local system access.
Network-exploitable denial-of-service in Oracle MySQL Connector/ODBC 26.7.0 allows low-privileged authenticated attackers to cause a complete hang or repeatable crash of the connector via multiple protocols. Oracle characterizes this as easily exploitable, consistent with the low-complexity, low-privilege CVSS vector (AV:N/AC:L/PR:L). No public exploit code or active exploitation has been identified at time of analysis, though the availability impact is rated High with no confidentiality or integrity exposure.
MySQL Connector/ODBC version 26.7.0 exposes a local denial-of-service condition that allows an unauthenticated attacker with logon access to the host to cause a complete hang or repeatable crash of the connector, disrupting dependent applications. Exploitation requires human interaction from a third party (UI:R), constraining the realistic attack surface to insider threat or socially engineered scenarios on the affected host. No public exploit code has been identified and this vulnerability is not listed in the CISA KEV catalog; availability is the sole impact dimension - confidentiality and integrity are unaffected.
Local exploitation of MySQL Connector/ODBC 26.7.0 on Oracle MySQL allows any user with OS-level logon to the affected infrastructure to crash or hang the connector process and read a subset of accessible data. The attack requires no authentication to MySQL Connectors itself and no user interaction, making it trivially executable by any local user or process on the host. No public exploit code has been identified at time of analysis, and exploitation is bounded by the requirement for local system access.
Network-exploitable denial-of-service in Oracle MySQL Connector/ODBC 26.7.0 allows low-privileged authenticated attackers to cause a complete hang or repeatable crash of the connector via multiple protocols. Oracle characterizes this as easily exploitable, consistent with the low-complexity, low-privilege CVSS vector (AV:N/AC:L/PR:L). No public exploit code or active exploitation has been identified at time of analysis, though the availability impact is rated High with no confidentiality or integrity exposure.
MySQL Connector/ODBC version 26.7.0 exposes a local denial-of-service condition that allows an unauthenticated attacker with logon access to the host to cause a complete hang or repeatable crash of the connector, disrupting dependent applications. Exploitation requires human interaction from a third party (UI:R), constraining the realistic attack surface to insider threat or socially engineered scenarios on the affected host. No public exploit code has been identified and this vulnerability is not listed in the CISA KEV catalog; availability is the sole impact dimension - confidentiality and integrity are unaffected.