MariaDB RCE bug joins Cisco, Windows and Metabase security alerts

THREE critical vulnerabilities were reported today, involving Cisco Secure Firewall, Microsoft Windows, and Metabase. A focus is on a newly disclosed MariaDB remote code execution exploit that allows low-privileged users to execute commands. The exploit hinges on two memory-safety bugs leading to compromised flow control. Although proof-of-concept code is publicly available, actual exploitation has not been confirmed. Affected MariaDB versions include 10.6, 10.11, 11.4, 11.8, and 12.3, and it is recommended to apply patches immediately.