Known vulnerabilities in PHP 7.3.0beta3

Vendor: PHP Group
Software: PHP
Version: 7.3.0beta3
Software CPE: cpe:2.3:a:php_group:php:*:*:*:*:*:*:*:*
Total vulnerabilities: 63
Public exploits: 3
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting PHP version 7.3.0beta3 PHP 7.3.0beta3 is affected by 63 vulnerabilities: 1 critical, 10 high, 13 medium, 39 low Critical High Medium Low

Vulnerabilities (63)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU120271 - Heap-based Buffer Overflow
CVE-2025-14178
CWE-122 High
No
No
8.1.34, 8.2.30, 8.3.29, 8.4.16, 8.5.1 23.12.2025 SB2025122340
SB2025122342
SB2026010709
and 33 more
#VU91106 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-4577
CWE-78 Critical
Public exploit available
Exploited
8.1.29, 8.2.20, 8.3.8 04.06.2024 SB2024060501
SB2024060502
SB2024060503
and 12 more
#VU74185 - Memory corruption
CVE-2022-4900
CWE-119 Low
No
No
8.0.22, 8.1.9 30.03.2023 SB2023033010
SB2023033014
SB2023041468
and 4 more
#VU72167 - Out-of-bounds write
CVE-2023-0568
CWE-787 Medium
No
No
8.0.28, 8.1.16, 8.2.3 14.02.2023 SB2023021417
SB2023021526
SB2023022245
and 27 more
#VU72166 - Use of Insufficiently Random Values
CVE-2023-0567
CWE-330 Medium
No
No
8.0.28, 8.1.16, 8.2.3 14.02.2023 SB2023021417
SB2023021526
SB2023022245
and 23 more
#VU72165 - Improper input validation
CVE-2023-0662
CWE-20 Medium
No
No
8.0.28, 8.1.16, 8.2.3 14.02.2023 SB2023021417
SB2023021526
SB2023022245
and 25 more
#VU58331 - Improper input validation
CVE-2021-21707
CWE-20 Medium
No
No
7.3.33, 7.4.26, 8.0.13 23.11.2021 SB2021112317
SB2021112318
SB2022011821
and 21 more
#VU57656 - Out-of-bounds write
CVE-2021-21703
CWE-787 Low
No
No
7.4.25, 8.0.12 26.10.2021 SB2021102621
SB2021102719
SB2022012745
and 20 more
#VU56905 - Absolute Path Traversal
CVE-2021-21706
CWE-36 Medium
No
No
7.3.31, 7.4.24, 8.0.11 29.09.2021 SB2021092901
SB2021093001
SB2022111831
and 1 more
#VU54566 - Stack-based buffer overflow
CVE-2021-21704
CWE-121 High
No
No
7.3.29, 7.4.21, 8.0.8 06.07.2021 SB2021070611
SB2021070612
SB2021070613
and 17 more
#VU54565 - Server-Side Request Forgery (SSRF)
CVE-2021-21705
CWE-918 Medium
No
No
7.3.29, 7.4.21, 8.0.8 06.07.2021 SB2021070611
SB2021070612
SB2021070613
and 21 more
#VU50403 - NULL Pointer Dereference
CVE-2021-21702
CWE-476 Medium
No
No
7.3.27, 7.4.15, 8.0.2 07.02.2021 SB2021020704
SB2021020705
SB2021020707
and 19 more
#VU49338 - Improper input validation
CVE-2020-7071
CWE-20 Medium
No
No
7.3.26, 7.4.14, 8.0.1 07.01.2021 SB2021010720
SB2021010722
SB2021010903
and 17 more
#VU47253 - Cryptographic Issues
CVE-2020-7069
CWE-310 Low
No
No
7.2.34, 7.3.23, 7.4.11 02.10.2020 SB2020100201
SB2020100220
SB2020102043
and 16 more
#VU47252 - Improper input validation
CVE-2020-7070
CWE-20 Medium
No
No
7.2.34, 7.3.23, 7.4.11 02.10.2020 SB2020100201
SB2020100221
SB2020102043
and 16 more
#VU34121 - Use After Free
CVE-2020-7068
CWE-416 Medium
No
No
7.2.33, 7.3.21, 7.4.9 07.08.2020 SB2020080711
SB2020090106
SB2020090721
and 15 more
#VU28318 - Resource exhaustion
CVE-2019-11048
CWE-400 Medium
No
No
7.2.31, 7.3.18, 7.4.6 28.05.2020 SB2020052806
SB2020052807
SB2020062301
and 12 more
#VU26979 - Out-of-bounds read
CVE-2020-7067
CWE-125 Medium
No
No
7.2.30, 7.3.17, 7.4.5 16.04.2020 SB2020041609
SB2020051426
SB2020051427
and 5 more
#VU26259 - Out-of-bounds read
CVE-2020-7064
CWE-125 Low
No
No
7.2.29, 7.3.16, 7.4.4 20.03.2020 SB2020032006
SB2020032625
SB2020051109
and 13 more
#VU26257 - Improper input validation
CVE-2020-7066
CWE-20 Low
No
No
7.2.29, 7.3.16, 7.4.4 20.03.2020 SB2020032006
SB2020032625
SB2020051109
and 13 more


Showing elements 1 - 20 out of 63