Known vulnerabilities in PHP 8.3.34

Vendor: PHP Group
Software: PHP
Version: 8.3.34
Software CPE: cpe:2.3:a:php_group:php:*:*:*:*:*:*:*:*
Total vulnerabilities: 6
Public exploits: 0
Known exploited (KEV): 0

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting PHP version 8.3.34 PHP 8.3.34 is affected by 6 vulnerabilities: 3 medium, 3 low Critical High Medium Low

Vulnerabilities (6)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU159404 - Integer overflow
CVE-2026-6103
CWE-190 Low
No
No
8.2.34, 8.3.35, 8.4.26, 8.5.11 05.11.2026 SB2026092449
SB2026110556
SB2026110558
and 12 more
#VU159403 - Improper Validation of Certificate with Host Mismatch
CVE-2026-91769
CWE-297 Low
No
No
8.2.34, 8.3.35, 8.4.26, 8.5.11 05.11.2026 SB2026092449
SB2026110556
SB2026110558
and 12 more
#VU159402 - Improper Handling of Windows Device Names
CVE-2026-17545
CWE-67 Medium
No
No
8.2.34, 8.3.35, 8.4.26, 8.5.11 05.11.2026 SB2026092449
#VU159401 - Out-of-bounds read
CVE-2025-1218
CWE-125 Low
No
No
8.2.34, 8.3.35, 8.4.26, 8.5.11 05.11.2026 SB2026092449
SB2026110556
SB2026110558
and 12 more
#VU159400 - Heap-based Buffer Overflow
CVE-2025-14181
CWE-122 Medium
No
No
8.2.34, 8.3.35, 8.4.26, 8.5.11 05.11.2026 SB2026092449
SB2026110556
SB2026110558
and 12 more
#VU159339 - Out-of-bounds read
CVE-2026-92842
CWE-125 Medium
No
No
8.2.34, 8.3.35, 8.4.26, 8.5.11 04.11.2026 SB2026092449
SB2026110556
SB2026110558
and 12 more