CVE-2025-53053: 
MySQL vulnerability analysis and mitigation

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML) affects versions 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. This vulnerability was disclosed on October 21, 2025, and allows high privileged attackers with network access via multiple protocols to compromise MySQL Server (Oracle CPU Oct 2025).

The vulnerability has a CVSS 3.1 Base Score of 5.5 (Medium) with the following vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H. The attack requires network access and high privileges, but is considered easily exploitable. No user interaction is required for exploitation (Oracle CPU Oct 2025).

Successful exploitation can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. Additionally, attackers may gain unauthorized update, insert or delete access to some of MySQL Server accessible data (Oracle CPU Oct 2025).

Oracle has released patches for affected versions (8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0) as part of the October 2025 Critical Patch Update. Organizations are strongly advised to apply these security patches as soon as possible (Oracle CPU Oct 2025).