Known vulnerabilities in PHP 8.5.7

Vendor: PHP Group
Software: PHP
Version: 8.5.7
Software CPE: cpe:2.3:a:php_group:php:*:*:*:*:*:*:*:*
Total vulnerabilities: 5
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting PHP version 8.5.7 PHP 8.5.7 is affected by 5 vulnerabilities: 1 high, 3 medium, 1 low Critical High Medium Low

Vulnerabilities (5)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU140834 - Out-of-bounds write
CVE-2026-17544
CWE-787 Medium
No
No
8.4.24, 8.5.9 03.08.2026 SB2026080395
SB2026080397
SB2026080398
and 1 more
#VU140833 - Uncontrolled Recursion
CVE-2026-7260
CWE-674 Low
No
No
8.2.33, 8.3.33, 8.4.24, 8.5.9 03.08.2026 SB2026080395
SB2026080397
SB2026080398
and 5 more
#VU140832 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-17543
CWE-89 High
No
No
8.2.33, 8.3.33, 8.4.24, 8.5.9 03.08.2026 SB2026080395
SB2026080397
SB2026080398
and 5 more
#VU140831 - Improper input validation
CVE-2026-9672
CWE-20 Medium
No
No
8.2.33, 8.3.33, 8.4.24, 8.5.9 03.08.2026 SB2026080395
SB2026080396
SB2026080603
and 3 more
#VU137286 - Memory corruption
CVE-2026-14355
CWE-119 Medium
No
No
8.2.32, 8.3.32, 8.4.23, 8.5.8 09.07.2026 SB2026070955
SB2026070956
SB2026071356
and 16 more