PHP

Every one of the 108 is a mark on the map. Named now: 1 to 26, most at risk first.

1. PHP 8.2 < 8.2.35, 8.3 < 8.3.36, 8.4 < 8.4.27, 8.5 < 8.5.12 - Use-After-Free Remote Code ExecutionCVE-2026-109619PHP Group · CVSS 9.2 · 100% likelycovered by CyberSIXT

   CWE-416China-nexus actorLazarus Group59 articles4 articles this week: Check Point links PHP2Shell flaws to destructive gateway attacks

2. PHP2Shell (CVE-2026-109618/CVE-2026-109619) - Active Crash DetectionCVE-2026-109618PHP Group · CVSS 9.2 · 100% likelycovered by CyberSIXT

   CWE-416China-nexus actorLazarus Group60 articles4 articles this week: Check Point links PHP2Shell flaws to destructive gateway attacks

3. PHP CGI v5.3.12/5.4.2 Remote Code ExecutionCVE-2012-1823PHP · CVSS 9.8 · 100% likely

   CWE-77

4. PHP CGI - Argument InjectionCVE-2024-4577PHP Group · CVSS 9.8 · 100% likelycovered by CyberSIXT

   CWE-78

5. PHP-FPM Path Info Buffer Underflow - Remote Code ExecutionCVE-2019-11043PHP · CVSS 8.7 · 100% likelycovered by CyberSIXT

   CWE-1201 article

6. mysqlnd/pdo password buffer overflowCVE-2022-31626PHP Group · CVSS 7.5 · 58% likely

   CWE-120

7. $_COOKIE names string replacement (. -> _): cookie integrity vulnerabilitiesCVE-2022-31629PHP Group · CVSS 6.5 · 50% likely

   CWE-20

8. __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fixCVE-2024-2756PHP Group · CVSS 6.5 · 38% likely

   CWE-20

9. Command injection via array-ish $command parameter of proc_open()CVE-2024-1874PHP Group · CVSS 9.4 · 33% likely

   CWE-116

10. Command injection via array-ish $command parameter of proc_open() (bypass CVE-2024-1874 fix)CVE-2024-5585PHP Group · CVSS 7.7 · 29% likely

    CWE-116

11. Special characters break path parsing in XML functionsCVE-2021-21707PHP Group · CVSS 5.3 · 25% likely

    CWE-159

12. Buffer overflow and overread in phar_dir_read()CVE-2023-3824PHP Group · CVSS 9.4 · 22% likely

    CWE-119

13. Filter bypass in filter_var (FILTER_VALIDATE_URL)CVE-2024-5458PHP Group · CVSS 5.3 · 12% likely

    CWE-345

14. global buffer-overflow in mbfl_filt_conv_big5_wcharCVE-2020-7060PHP Group · CVSS 6.5 · 8.9% likely

    CWE-125

15. DirectoryIterator class silently truncates after a null byteCVE-2019-11045PHP Group · CVSS 3.7 · 8.8% likely

    CWE-170

16. Use-after-free in exif parsing under memory sanitizerCVE-2019-11050PHP Group · CVSS 4.8 · 7.6% likely

    CWE-125

17. Heap-buffer-overflow READ in exifCVE-2019-11047PHP Group · CVSS 4.8 · 7.5% likely

    CWE-125

18. OOB read in php_strip_tags_exCVE-2020-7059PHP Group · CVSS 6.5 · 7.1% likely

    CWE-125

19. Heap over-read in PHP EXIF extensionCVE-2019-11036PHP Group · CVSS 4.8 · 7.0% likely

    CWE-126

20. Temporary files are not cleaned after OOM when parsing HTTP request dataCVE-2019-11048PHP Group · CVSS 5.3 · 6.3% likely

    CWE-400

21. link() silently truncates after a null byte on WindowsCVE-2019-11044PHP Group · CVSS 3.7 · 5.1% likely

    CWE-170

22. PHP parses encoded cookie names so malicious `__Host-` cookies can be sentCVE-2020-7070PHP Group · CVSS 4.3 · 5.0% likely

    CWE-20

23. mb_strtolower (UTF-32LE): stack-buffer-overflow at php_unicode_tolower_fullCVE-2020-7065PHP Group · CVSS 7.4 · 4.9% likely

    CWE-121

24. OOB Read in urldecode()CVE-2020-7067PHP Group · CVSS 7.5 · 4.4% likely

    CWE-125

25. heap-buffer-overflow on exif_process_user_comment in EXIF extensionCVE-2019-11042PHP Group · CVSS 4.8 · 4.4% likely

    CWE-125

26. heap-buffer-overflow on exif_scan_thumbnail in EXIF extensionCVE-2019-11041PHP Group · CVSS 4.8 · 4.4% likely

    CWE-125

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.