Memory Corruption

Every one of the 246 is a mark on the map. Named now: 1 to 26, most at risk first.

1. PHP 8.2 < 8.2.35, 8.3 < 8.3.36, 8.4 < 8.4.27, 8.5 < 8.5.12 - Use-After-Free Remote Code ExecutionCVE-2026-109619PHP Group · CVSS 9.2 · 100% likelycovered by CyberSIXT

   CWE-416China-nexus actorLazarus Group59 articles4 articles this week: Check Point links PHP2Shell flaws to destructive gateway attacks

2. PHP2Shell (CVE-2026-109618/CVE-2026-109619) - Active Crash DetectionCVE-2026-109618PHP Group · CVSS 9.2 · 100% likelycovered by CyberSIXT

   CWE-416China-nexus actorLazarus Group60 articles4 articles this week: Check Point links PHP2Shell flaws to destructive gateway attacks

3. PHP-FPM Path Info Buffer Underflow - Remote Code ExecutionCVE-2019-11043PHP · CVSS 8.7 · 100% likelycovered by CyberSIXT

   CWE-1202 bounty reports1 article

4. In PHP through 5.6.33, 7.0.x before 7.0.28, 7.1.x through 7.1.14, and 7.2.x through 7.2.2, there is a stack-based buffer under-read while parsing an HTTP response in the php_strea…CVE-2018-7584Php · 87% likely

   CWE-119

5. Buffer overflow in the apache_request_headers function in sapi/cgi/cgi_main.c in PHP 5.4.x before 5.4.3 allows remote attackers to cause a denial of service (application crash) vi…CVE-2012-2329Php · 62% likely

   CWE-119

6. mysqlnd/pdo password buffer overflowCVE-2022-31626PHP Group · CVSS 7.5 · 58% likely

   CWE-120

7. Multiple integer overflows in php_zip.c in the zip extension in PHP before 7.0.6 allow remote attackers to cause a denial of service (heap-based buffer overflow and application cr…CVE-2016-3078Php · 56% likely

   CWE-190

8. In all versions of PHP 7, during the unserialization process, resizing the 'properties' hash table of a serialized object may lead to use-after-free. A remote attacker may exploit…CVE-2016-7479Php · 42% likely

   CWE-416

9. The SplObjectStorage unserialize implementation in ext/spl/spl_observer.c in PHP before 7.0.12 does not verify that a key is an object, which allows remote attackers to execute ar…CVE-2016-7480Php · 42% likely

   CWE-119

10. Multiple stack-based buffer overflows in the phar_set_inode function in phar_internal.h in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allow remote attackers to…CVE-2015-3329Php · 38% likely

    CWE-119

11. Use-after-free vulnerability in wddx.c in the WDDX extension in PHP before 5.5.33 and 5.6.x before 5.6.19 allows remote attackers to cause a denial of service (memory corruption a…CVE-2016-3141Php · 36% likely

    CWE-119

12. The asn1_time_to_time_t function in ext/openssl/openssl.c in PHP before 5.3.28, 5.4.x before 5.4.23, and 5.5.x before 5.5.7 does not properly parse (1) notBefore and (2) notAfter…CVE-2013-6420Php · 35% likely

    CWE-119

13. Buffer overflow in the date_from_ISO8601 function in the mkgmtime implementation in libxmlrpc/xmlrpc.c in the XMLRPC extension in PHP before 5.4.34, 5.5.x before 5.5.18, and 5.6.x…CVE-2014-3668Php · 27% likely

    CWE-119

14. In PHP before 5.6.32, 7.x before 7.0.25, and 7.1.x before 7.1.11, an error in the date extension's timelib_meridian handling of 'front of' and 'back of' directives could be used b…CVE-2017-16642Php · 26% likely

    CWE-125

15. Stack-based buffer overflow in the socket_connect function in ext/sockets/sockets.c in PHP 5.3.3 through 5.3.6 might allow context-dependent attackers to execute arbitrary code vi…CVE-2011-1938Php · 23% likely

    CWE-119

16. Format string vulnerability in the zend_throw_or_error function in Zend/zend_execute_API.c in PHP 7.x before 7.0.1 allows remote attackers to execute arbitrary code via format str…CVE-2015-8617Php · 23% likely

    CWE-134

17. The exif_ifd_make_value function in exif.c in the EXIF extension in PHP before 5.4.34, 5.5.x before 5.5.18, and 5.6.x before 5.6.2 operates on floating-point arrays incorrectly, w…CVE-2014-3670Php · 23% likely

    CWE-119

18. Buffer overflow and overread in phar_dir_read()CVE-2023-3824PHP Group · CVSS 9.4 · 22% likely

    CWE-119

19. The gdImageCreateFromXpm function in gdxpm.c in libgd, as used in PHP 5.4.26 and earlier, allows remote attackers to cause a denial of service (NULL pointer dereference and applic…CVE-2014-2497Php · 20% likely

    CWE-476

20. Format string vulnerability in the error-reporting feature in the mysqli extension in PHP 5.1.0 and 5.1.1 might allow remote attackers to execute arbitrary code via format string…CVE-2006-0200Php · 20% likely

    CWE-134

21. Buffer overflow in the com_print_typeinfo function in PHP 5.4.3 and earlier on Windows allows remote attackers to execute arbitrary code via crafted arguments that trigger incorre…CVE-2012-2376Php · 20% likely

    CWE-119

22. Heap-based buffer overflow in the enchant_broker_request_dict function in ext/enchant/enchant.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x before 5.6.6 allows remote att…CVE-2014-9705Php · 19% likely

    CWE-119

23. The cdf_read_property_info function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5.5.x before 5.5.13 allows remote attackers to cause a denial of service (infinite…CVE-2014-0238Php · 19% likely

    CWE-119

24. Buffer overflow in the intT1_EnvGetCompletePath function in lib/t1lib/t1env.c in t1lib 5.1.1 allows context-dependent attackers to execute arbitrary code via a long FileName param…CVE-2007-4033Php · 19% likely

    CWE-119

25. sapi/cgi/cgi_main.c in the CGI component in PHP through 5.4.36, 5.5.x through 5.5.20, and 5.6.x through 5.6.4, when mmap is used to read a .php file, does not properly consider th…CVE-2014-9427Php · 18% likely

    CWE-119

26. Zend/zend_hash.c in PHP before 7.0.15 and 7.1.x before 7.1.1 mishandles certain cases that require large array allocations, which allows remote attackers to execute arbitrary code…CVE-2017-5340Php · 17% likely

    CWE-190

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.