Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
4520 articles · 179204 vulns · 37/41 feeds (7d)
← Back to list
6.5
CVE-2026-47064PATCHED
oracle · mysql server

CVE-2026-47064: Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported vers

Description

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). The vulnerability affects unknown processing and results in resource consumption, allowing remote exploitation by low privileged attackers with network access. Successful exploitation can cause denial of service through resource exhaustion or server crashes.

Affected Products

VendorProductVersions
oraclemysql server8.4.0-8.4.10, 9.7.0-9.7.1, 8.0.0-8.0.47, 8.4.0-8.4.10, 9.7.0-9.7.1

Also Affects

Downstream vendors/products affected by this vulnerability

VendorProductSourceConfidence
oraclemysqlcert_advisory90%

References

  • https://www.oracle.com/security-alerts/cpujul2026.html(vendor-advisory)

Related News (2 articles)

Tier B
BSI Advisories3h ago
[NEU] [hoch] Oracle MySQL: Mehrere Schwachstellen
→ No new info (linked only)
Tier C
VulDB14h ago
CVE-2026-47064 | Oracle MySQL Cluster/MySQL Server Server Optimizer resource consumption
→ No new info (linked only)
CVSS 3.16.5 CRITICAL
VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CISA KEV❌ No
Actively exploited❌ No
Patch available
https://www.oracle.com/security-alerts/cpujul2026.html
PublishedJul 21, 2026
Last enriched14h agov2
Trending Score41
Source articles2
Independent2
Info Completeness8/14
Missing: epss, cwe, kev, exploit, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

CRITICALCVE-2026-46817EXPKEV
CVE-2026-46817: Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). Supported versi
Trending: 71
HIGHCVE-2026-46863
CVE-2026-46863: Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Connection Handling). Supp
Trending: 43
CRITICALCVE-2026-47024
CVE-2026-47024: Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Panel Processor). The
Trending: 41
CRITICALCVE-2026-60238
CVE-2026-60238: Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar
Trending: 41
CRITICALCVE-2026-60174
CVE-2026-60174: Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported vers
Trending: 41

Pin to Dashboard

Verification

State: unverified
Confidence: 0%

Vulnerability Timeline

CVE Published
Jul 21, 2026
Patch Available
Jul 21, 2026
Discovered by ZDM
Jul 21, 2026
Updated: severity, description
Jul 21, 2026

Version History

v2
Last enriched 14h ago
v2Tier C14h ago

Severity corrected from MEDIUM to CRITICAL based on new vulnerability classification; description updated to clarify resource consumption impact.

severitydescription
via VulDB
v114h ago

Initial creation