Known vulnerabilities in php8.1 (Ubuntu package)
Vendor:
Canonical Ltd.
Software:
php8.1 (Ubuntu package)
Software CPE:
cpe:2.3:o:canonical:php8.1_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Website:
https://www.ubuntu.com/
Total vulnerabilities:
39
Public exploits:
2
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
8.1.2-1ubuntu2.25
8.3.6-0ubuntu0.24.04.10
8.5.4-0ubuntu1.2
8.1.2-1ubuntu2.24
8.3.6-0ubuntu0.24.04.9
8.4.11-1ubuntu1.2
8.5.4-0ubuntu1.1
8.1.0~rc4-1ubuntu1
8.1.7-2
8.1.12-1ubuntu4
8.1.12-1ubuntu4.1
8.1.12-1ubuntu3
8.1.12-1ubuntu2
8.1.8-1
8.1.9-1
8.1.10-1
8.1.10-2
8.1.11-1
8.1.12-1
8.1.12-1ubuntu1
8.1.7-1ubuntu3.4
8.1.7-1ubuntu3
8.1.7-1ubuntu2
8.1.6-1
8.1.7-1
8.1.7-1ubuntu1
8.1.5-1ubuntu3
8.1.5-1ubuntu2
8.1.3-1
8.1.4-1
8.1.5-1
8.1.5-1ubuntu1
8.1.2-1ubuntu4
8.1.2-1ubuntu3
8.1.2-1ubuntu2.19
8.1.2-1ubuntu2.15
8.1.2-1ubuntu2.12
8.1.2-1ubuntu2.9
8.1.2-1ubuntu2.6
8.1.2-1ubuntu2.5
8.1.2-1ubuntu2.4
8.1.2-1ubuntu2.3
8.1.2-1ubuntu2.2
8.1.2-1ubuntu2
8.1.2-1ubuntu2.1
8.1.2-1ubuntu1
8.1.2-1build1
8.1.2-1
8.1.1-4
8.1.1-1
8.1.1-2
8.1.1-3
8.1.0~rc4-1~ubuntu1
8.1.0~rc4-1ubuntu2
8.1.0~beta3-1
8.1.0~rc1-1
8.1.0~rc2-1
8.1.0~rc4-1
8.1.0~rc4-1+u1
8.1.0~rc5-1
8.1.0~rc5-2
8.1.0~rc6-1
8.1.0~rc6-2
8.1.0~rc6-3
8.1.0-1
8.1.2-1ubuntu2.22
8.3.6-0ubuntu0.24.04.5
8.4.5-1ubuntu1.1
8.1.2-1ubuntu2.21
8.1.2-1ubuntu2.20
8.1.2-1ubuntu2.18
8.1.2-1ubuntu2.17
8.1.2-1ubuntu2.16
8.1.2-1ubuntu2.14
8.1.12-1ubuntu4.3
8.1.2-1ubuntu2.13
8.1.7-1ubuntu3.5
8.1.12-1ubuntu4.2
8.1.2-1ubuntu2.11
8.1.7-1ubuntu3.3
8.1.2-1ubuntu2.10
8.1.7-1ubuntu3.2
8.1.2-1ubuntu2.8
8.1.7-1ubuntu3.1
Vulnerabilities (39)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU137285 - Uncaught Exception CVE-2026-12184 |
CWE-248 | Medium | 8.1.2-1ubuntu2.25, 8.3.6-0ubuntu0.24.04.10, 8.5.4-0ubuntu1.2 | 09.07.2026 |
SB2026051001 SB2026071918 SB2026071919 and 5 more |
||
| #VU137286 - Memory corruption CVE-2026-14355 |
CWE-119 | Medium | 8.1.2-1ubuntu2.25, 8.3.6-0ubuntu0.24.04.10, 8.5.4-0ubuntu1.2 | 09.07.2026 |
SB2026070955 SB2026070956 SB2026071356 and 17 more |
||
| #VU130908 - Improper Encoding or Escaping of Output CVE-2026-7263 |
CWE-116 | Medium | 8.1.2-1ubuntu2.24, 8.3.6-0ubuntu0.24.04.9, 8.4.11-1ubuntu1.2, 8.5.4-0ubuntu1.1 | 10.05.2026 |
SB2026051001 SB2026051416 SB2026051523 and 3 more |
||
| #VU130909 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-6735 |
CWE-79 | Medium | 8.1.2-1ubuntu2.24, 8.3.6-0ubuntu0.24.04.9, 8.4.11-1ubuntu1.2, 8.5.4-0ubuntu1.1 | 10.05.2026 |
SB2026051001 SB20260511112 SB20260513120 and 19 more |
||
| #VU130910 - NULL Pointer Dereference CVE-2026-7259 |
CWE-476 | Medium | 8.1.2-1ubuntu2.24, 8.3.6-0ubuntu0.24.04.9, 8.4.11-1ubuntu1.2, 8.5.4-0ubuntu1.1 | 10.05.2026 |
SB2026051001 SB20260511112 SB20260513120 and 14 more |
||
| #VU130911 - Out-of-bounds read CVE-2026-6104 |
CWE-125 | Medium | 8.1.2-1ubuntu2.24, 8.3.6-0ubuntu0.24.04.9, 8.4.11-1ubuntu1.2, 8.5.4-0ubuntu1.1 | 10.05.2026 |
SB2026051001 SB2026051416 SB2026051523 and 3 more |
||
| #VU130912 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2025-14179 |
CWE-89 | High | 8.1.2-1ubuntu2.24, 8.3.6-0ubuntu0.24.04.9, 8.4.11-1ubuntu1.2, 8.5.4-0ubuntu1.1 | 10.05.2026 |
SB2026051001 SB20260511112 SB20260513120 and 19 more |
||
| #VU130913 - Use After Free CVE-2026-6722 |
CWE-416 | Medium | 8.1.2-1ubuntu2.24, 8.3.6-0ubuntu0.24.04.9, 8.4.11-1ubuntu1.2, 8.5.4-0ubuntu1.1 | 10.05.2026 |
SB2026051001 SB20260511112 SB20260513120 and 17 more |
||
| #VU130914 - Use After Free CVE-2026-7261 |
CWE-416 | Medium | 8.1.2-1ubuntu2.24, 8.3.6-0ubuntu0.24.04.9, 8.4.11-1ubuntu1.2, 8.5.4-0ubuntu1.1 | 10.05.2026 |
SB2026051001 SB20260511112 SB20260513120 and 17 more |
||
| #VU130915 - NULL Pointer Dereference CVE-2026-7262 |
CWE-476 | Medium | 8.1.2-1ubuntu2.24, 8.3.6-0ubuntu0.24.04.9, 8.4.11-1ubuntu1.2, 8.5.4-0ubuntu1.1 | 10.05.2026 |
SB2026051001 SB20260511112 SB20260513120 and 20 more |
||
| #VU130916 - Integer overflow CVE-2026-7568 |
CWE-190 | Medium | 8.1.2-1ubuntu2.24, 8.3.6-0ubuntu0.24.04.9, 8.4.11-1ubuntu1.2, 8.5.4-0ubuntu1.1 | 10.05.2026 |
SB2026051001 SB20260511112 SB20260513120 and 20 more |
||
| #VU112190 - Server-Side Request Forgery (SSRF) CVE-2025-1220 |
CWE-918 | Medium | 8.1.2-1ubuntu2.22, 8.3.6-0ubuntu0.24.04.5, 8.4.5-1ubuntu1.1 | 04.07.2025 |
SB2025070427 SB2025070433 SB2025070434 and 16 more |
||
| #VU112189 - NULL Pointer Dereference CVE-2025-6491 |
CWE-476 | Medium | 8.1.2-1ubuntu2.22, 8.3.6-0ubuntu0.24.04.5, 8.4.5-1ubuntu1.1 | 04.07.2025 |
SB2025070427 SB2025070433 SB2025070434 and 18 more |
||
| #VU112187 - Error Handling CVE-2025-1735 |
CWE-388 | Medium | 8.1.2-1ubuntu2.22, 8.3.6-0ubuntu0.24.04.5, 8.4.5-1ubuntu1.1 | 04.07.2025 |
SB2025070427 SB2025070433 SB2025070434 and 17 more |
||
| #VU105644 - Improper input validation CVE-2025-1217 |
CWE-20 | Medium | 8.1.2-1ubuntu2.21 | 12.03.2025 |
SB2025031234 SB2025031232 SB2025031231 and 21 more |
||
| #VU105643 - Improper input validation CVE-2025-1734 |
CWE-20 | Medium | 8.1.2-1ubuntu2.21 | 12.03.2025 |
SB2025031234 SB2025031232 SB2025031231 and 21 more |
||
| #VU105642 - Improper input validation CVE-2025-1861 |
CWE-20 | Low | 8.1.2-1ubuntu2.21 | 12.03.2025 |
SB2025031234 SB2025031232 SB2025031231 and 21 more |
||
| #VU105641 - Improper Authentication CVE-2025-1736 |
CWE-287 | Medium | 8.1.2-1ubuntu2.21 | 12.03.2025 |
SB2025031234 SB2025031232 SB2025031231 and 21 more |
||
| #VU105640 - Resource Management Errors CVE-2025-1219 |
CWE-399 | Low | 8.1.2-1ubuntu2.21 | 12.03.2025 |
SB2025031231 SB2025031232 SB2025031233 and 20 more |
||
| #VU105639 - Use After Free CVE-2024-11235 |
CWE-416 | Medium | 8.1.2-1ubuntu2.21 | 12.03.2025 |
SB2025031231 SB2025031232 SB2025031233 and 10 more |
Showing elements 1 - 20 out of 39