CSIRTS // UNIFIED SECURITY ADVISORY FEEDSYS ● ONLINE · POWERED BY INTELFUSIONS.COM

CVE-2024-21009

mediumCVSS 4.9covered by 1 sourcefirst seen 2026-08-06

CSIRTS triage

vendor: Oracleproduct: MySQL ServerDenial of serviceaffected: 8.0.36 and prior, 8.3.0 and prior
What
A vulnerability in the Server Optimizer component allows a high privileged attacker to cause a denial of service via network access.
Who is affected
All deployments of MySQL Server 8.0.36 and earlier or 8.3.0 and earlier are affected.
Urgency
Medium priority; not yet exploited in the wild, but requires high privilege to exploit.
Action
Update MySQL Server to a patched version beyond 8.0.36 or 8.3.0.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch CVE-2024-21009

Get an email if CVE-2024-21009 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.

Exploitation outlook

Advisory coverage (1)

External references

NVD record for CVE-2024-21009

CVE.org record

Embed the live status

CVE-2024-21009 live status badge — this badge updates automatically when the KEV or exploit status changes. How to embed it →

[![CVE-2024-21009 status](https://www.csirts.com/badge/CVE-2024-21009)](https://www.csirts.com/cve/CVE-2024-21009)