CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
PHP Remote Code Execution (RCE) via Global State Use-After-Free (CVE-2026-109619)
[Affected Scope] PHP 8.1, 8.2, and 8.3 environments without the latest security patches.
[Impact] Remote attackers can achieve arbitrary code execution (RCE) by exploiting memory corruption in the PHP global state.
[Mitigation] Immediately update PHP to the latest security release and restart PHP-FPM/Web server processes.
PHP Remote Code Execution (RCE) via OOM Memory Corruption (CVE-2026-109618)
[Affected Scope] All web applications and server environments running on the PHP engine.
[Impact] Unauthenticated remote attackers can trigger Out-of-Memory (OOM) conditions to execute arbitrary code (RCE) with system privileges.
[Mitigation] Immediately apply official PHP security patches and restrict abnormal memory allocation via php.ini configurations.
Google Android Pixel Bootloader Logic Error Local Privilege Escalation Vulnerability (CVE-2024-29748)
[Affected Scope] Google Pixel devices and Android operating system versions prior to April 2024 security patch
[Impact] Local attackers can bypass memory protection mechanisms during bootloader transitions to dump memory, extract cryptographic keys, and escalate privileges
[Mitigation] Apply the Google April 2024 Pixel Security Update immediately to patch the bootloader logic