PHP PHP vulnerabilities

3 published CVEs name PHP PHP among the affected products; CISA lists 1 of them as exploited in the wild.

All 3 in the list Atom feed of new CVEs

Published CVEs: 3
Last 12 months: 1
Critical: 1
Known exploited: 1

Critical 1High 1Medium 1Low 0Not scored 0

CVEs per yearBy the year they were published

20191
20201
20261

Known exploitedNewest addition to KEV first

CVE-2019-11043
Underflow in PHP-FPM can lead to RCE
PHP · PHP
ExploitedHigh8.7

Newest CVEs

CVE-2026-14355
ext/openssl: Memory corruption in openssl_encrypt with AES-WRAP-PAD
php · php
Medium5.6
CVE-2014-3622
Use-after-free vulnerability in the add_post_var function in the Posthandler component in PHP 5.6.x before 5.6.1 might allow remote attackers to execute…
PHP · PHP
Critical9.8
CVE-2019-11043
Underflow in PHP-FPM can lead to RCE
PHP · PHP
ExploitedHigh8.7

Most common weaknesses