CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
PHP Remote Code Execution (RCE) via Global State Use-After-Free (CVE-2026-109619)
[Affected Scope] PHP 8.1, 8.2, and 8.3 environments without the latest security patches.
[Impact] Remote attackers can achieve arbitrary code execution (RCE) by exploiting memory corruption in the PHP global state.
[Mitigation] Immediately update PHP to the latest security release and restart PHP-FPM/Web server processes.
PHP Remote Code Execution (RCE) via OOM Memory Corruption (CVE-2026-109618)
[Affected Scope] All web applications and server environments running on the PHP engine.
[Impact] Unauthenticated remote attackers can trigger Out-of-Memory (OOM) conditions to execute arbitrary code (RCE) with system privileges.
[Mitigation] Immediately apply official PHP security patches and restrict abnormal memory allocation via php.ini configurations.
Windows Runtime Remote Code Execution Vulnerability (CVE-2022-21971) Security Advisory
[Affected Scope] Microsoft Windows operating systems utilizing Windows Runtime (WinRT), including Windows 10, Windows 11, and Windows Server 2016/2019/2022
[Impact] Successful exploitation allows an attacker to execute arbitrary code with the privileges of the active user by tricking them into opening a specially crafted file
[Mitigation] Apply the official Microsoft Cumulative Updates immediately and restrict execution of untrusted files