Java Driver vulnerabilities

2 known vulnerabilities in Java Driver from MongoDB. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.3 High severity

  Java Driver: Improper Neutralization of Special Elements in Data Query Logic

  CVE-2026-88033Sep 10, 2026MongoDB

  Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Java Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticat

• 7.5 High severity

  Java Driver: Use After Free

  CVE-2026-88032Sep 10, 2026MongoDB

  A use-after-free in the reactive client-side encryption component of the MongoDB Java Driver can cause native resources to be freed while an affected encrypted operation is still using them when the operation is cancelled. A party able to cause such an operati