Login Request a demo
RE
Database
Redis
by Redis · last CVE Aug 27, 2026
On CISA KEVExploited in the wild
71
CVEs
1
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities71In the news1Timeline
Severity mix
Critical 10High 41Medium 15Low 4
Severity
All severities71Critical10High41Medium15Low4
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add Redis to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-0543
In wildKEV
10.0
99%
Feb 18
Debian-specific Redis Server Lua Sandbox Escape Vulnerability
Affected: All versions, or not specified
CVE-2025-49844
9.9
83%
Oct 3
Redis is an open source, in-memory database that persists on disk
Affected: before 6.2.20; 7.0 before 7.2.11; 7.4.0 before 7.4.6; 8.0.0 before 8.0.4; 8.2.0 before 8.2.2
CVE-2025-27151
9.8
1%
May 29
Redis is an open source, in-memory database that persists on disk
Affected: 7.0.0 before 7.2.9; 7.4.0 before 7.4.4; 8.0.0 before 8.0.2
CVE-2024-46981
9.8
8%
Jan 6
Redis' Lua library commands may lead to remote code execution
Affected: >= 7.4.0, < 7.4.2; >= 7.2.0, < 7.2.7; < 6.2.17
CVE-2022-3734
9.8
1%
Oct 28
Redis on Windows dbghelp.dll uncontrolled search path
Affected: All versions, or not specified
CVE-2022-35951
9.8
4%
Sep 23
Redis is an in-memory database that persists on disk
Affected: 7.0.0 before 7.0.5
CVE-2018-11219
9.8
7%
Jun 17
An Integer Overflow issue was discovered in the struct library in the Lua subsystem in Redis before 3.2.12, 4.x before 4.0.10, and 5.x before 5.0 RC2, leading to a failure of…
Affected: before 3.2.12; 4.0 before 4.0.10; 5.0
CVE-2018-11218
9.8
59%
Jun 17
Memory Corruption was discovered in the cmsgpack library in the Lua subsystem in Redis before 3.2.12, 4.x before 4.0.10, and 5.x before 5.0 RC2 because of stack-based buffer…
Affected: before 3.2.12; 4.0 before 4.0.10; 5.0
CVE-2017-15047
9.8
2%
Oct 6
The clusterLoadConfig function in cluster.c in Redis 4.0.2 allows attackers to cause a denial of service (out-of-bounds array index and application crash) or possibly have…
Affected: 4.0.2
CVE-2016-8339
9.8
15%
Oct 28
A buffer overflow in Redis 3.2.x prior to 3.2.4 causes arbitrary code execution when a crafted command is sent
Affected: 3.2.0; 3.2.1; 3.2.2; 3.2.3
Showing 10