PH
Language
PHP
On CISA KEVExploited in the wildRansomware-linked
748
CVEs
6
On KEV
9.8
Max CVSS
4
New 30D
Severity mix
Critical 133High 129Medium 67Low 4
Watch
Add PHP to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-7068 | 3.6 | Sep 9 | In PHP versions 7.2.x below 7.2.33, 7.3.x below 7.3.21 and 7.4.x below 7.4.9, while processing PHAR files using phar extension, phar_parse_zipfile could be tricked into accessing… Affected: 7.2.0 before 7.2.33; 7.3.0 before 7.3.21; 7.4.0 before 7.4.9 |
| CVE-2026-6103 | 3.3 | Sep 25 | Phar TAR phar_tar_number() Integer Overflow - Archive Entry Injection Affected: 8.2.* before 8.2.34; 8.3.* before 8.3.35; 8.4.* before 8.4.26; 8.5.* before 8.5.11 |
| CVE-2024-9026 | 3.3 | Oct 8 | In PHP versions 8.1.* before 8.1.30, 8.2.* before 8.2.24, 8.3.* before 8.3.12, when using PHP-FPM SAPI and it is configured to catch workers output through catch_workers_output =… Affected: 8.1.0 before 8.1.30; 8.2.0 before 8.2.24; 8.3.0 before 8.3.12 |
| CVE-2025-1217 | 3.1 | Mar 29 | In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when http request module parses HTTP response obtained from a server,… Affected: 8.1.0 before 8.1.32; 8.2.0 before 8.2.28; 8.3.0 before 8.3.19; 8.4.0 before 8.4.5 |
Showing 4
The 500 most important CVEs for this product (exploited first, then by severity)