Known vulnerabilities in PHP 8.4.0

Vendor: PHP Group
Software: PHP
Version: 8.4.0
Software CPE: cpe:2.3:a:php_group:php:*:*:*:*:*:*:*:*
Total vulnerabilities: 4
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting PHP version 8.4.0 PHP 8.4.0 is affected by 4 vulnerabilities: 1 high, 2 medium, 1 low Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU140834 - Out-of-bounds write
CVE-2026-17544
CWE-787 Medium
No
No
8.4.24, 8.5.9 03.08.2026 SB2026080395
SB2026080397
SB2026080398
and 1 more
#VU140833 - Uncontrolled Recursion
CVE-2026-7260
CWE-674 Low
No
No
8.2.33, 8.3.33, 8.4.24, 8.5.9 03.08.2026 SB2026080395
SB2026080397
SB2026080398
and 5 more
#VU140832 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-17543
CWE-89 High
No
No
8.2.33, 8.3.33, 8.4.24, 8.5.9 03.08.2026 SB2026080395
SB2026080397
SB2026080398
and 5 more
#VU140831 - Improper input validation
CVE-2026-9672
CWE-20 Medium
No
No
8.2.33, 8.3.33, 8.4.24, 8.5.9 03.08.2026 SB2026080395
SB2026080396
SB2026080603
and 3 more