Known vulnerabilities in Redis

Vendor: Redis Labs
Software: Redis
Software CPE: cpe:2.3:a:redis_labs:redis:*:*:*:*:*:*:*:*
Total vulnerabilities: 43
Public exploits: 8
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Redis Redis is affected by 43 known vulnerabilities: 9 high, 29 medium, 5 low Critical High Medium Low

Vulnerabilities (43)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU130203 - Heap-based Buffer Overflow
CVE-2026-25243
CWE-122 Medium
No
No
7.2.14, 7.4.9, 8.2.6, 8.4.3, 8.6.3 05.05.2026 SB20260505114
SB20260509119
SB20260509120
and 23 more
#VU130202 - Use After Free
CVE-2026-23479
CWE-416 Medium
No
No
7.2.14, 7.4.9, 8.2.6, 8.4.3, 8.6.3 05.05.2026 SB20260505114
SB20260509119
SB20260509120
and 13 more
#VU130201 - Use After Free
CVE-2026-23631
CWE-416 Medium
No
No
7.2.14, 7.4.9, 8.2.6, 8.4.3, 8.6.3 05.05.2026 SB20260505114
SB20260509119
SB20260509120
and 15 more
#VU117913 - Stack-based buffer overflow
CVE-2025-62507
CWE-121 Medium
Available
No
8.2.3 03.11.2025 SB2025110310
#VU116641 - Improper Authentication
CVE-2025-46818
CWE-287 Medium
Available
No
6.2.20, 7.2.11, 7.4.6, 8.0.4, 8.2.2 07.10.2025 SB2025100706
SB2025100709
SB2025100710
and 38 more
#VU116640 - Out-of-bounds read
CVE-2025-46819
CWE-125 Medium
Available
No
6.2.20, 7.2.11, 7.4.6, 8.0.4, 8.2.2 07.10.2025 SB2025100706
SB2025100709
SB2025100710
and 38 more
#VU116639 - Integer overflow
CVE-2025-46817
CWE-190 High
Available
No
6.2.20, 7.2.11, 7.4.6, 8.0.4, 8.2.2 07.10.2025 SB2025100706
SB2025100709
SB2025100710
and 45 more
#VU116609 - Use After Free
CVE-2025-49844
CWE-416 Medium
Available
No
6.2.20, 7.2.11, 7.4.6, 8.0.4, 8.2.2 06.10.2025 SB2025100629
SB2025100633
SB2025100709
and 56 more
#VU112337 - Resource Management Errors
CVE-2025-48367
CWE-399 Medium
No
No
6.2.19, 7.2.10, 7.4.5, 8.0.3 07.07.2025 SB2025070725
SB20250716110
SB20250716111
and 31 more
#VU112336 - Out-of-bounds write
CVE-2025-32023
CWE-787 Medium
Available
No
6.2.19, 7.2.10, 7.4.5, 8.0.3 07.07.2025 SB2025070725
SB20250716110
SB20250716111
and 32 more
#VU109874 - Stack-based buffer overflow
CVE-2025-27151
CWE-121 Medium
No
No
7.2.9, 7.4.4, 8.0.2 27.05.2025 SB2025052769
SB20250716110
SB20250716111
and 14 more
#VU107885 - Resource Management Errors
CVE-2025-21605
CWE-399 Medium
No
No
6.2.18, 7.2.8, 7.4.3 23.04.2025 SB2025042342
SB2025042455
SB2025042456
and 33 more
#VU102383 - Use After Free
CVE-2024-46981
CWE-416 Medium
Available
No
6.2.17, 7.2.7, 7.4.2 06.01.2025 SB2025010646
SB2025010647
SB2025010901
and 39 more
#VU102382 - Improper input validation
CVE-2024-51741
CWE-20 Medium
No
No
7.2.7, 7.4.2 06.01.2025 SB2025010646
SB2025010647
SB2025010901
and 21 more
#VU97972 - Improper input validation
CVE-2024-31228
CWE-20 Medium
No
No
6.2.16, 7.2.6, 7.4.1 02.10.2024 SB2024100272
SB2024100323
SB2024100324
and 31 more
#VU97971 - Improper input validation
CVE-2024-31227
CWE-20 Medium
No
No
7.2.6, 7.4.1 02.10.2024 SB2024100272
SB2024100323
SB2024100324
and 15 more
#VU97970 - Stack-based buffer overflow
CVE-2024-31449
CWE-121 Medium
No
No
6.2.16, 7.2.6, 7.4.1 02.10.2024 SB2024100272
SB2024100323
SB2024100324
and 33 more
#VU85169 - Heap-based Buffer Overflow
CVE-2023-41056
CWE-122 High
No
No
7.0.15, 7.2.4 09.01.2024 SB2024010919
SB2024010921
SB2024010922
and 10 more
#VU82200 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2023-45145
CWE-362 Low
No
No
6.2.14, 7.0.14, 7.2.2 18.10.2023 SB2023101841
SB2023101848
SB2023101849
and 30 more
#VU80512 - Improper Access Control
CVE-2023-41053
CWE-284 Low
No
No
7.0.13, 7.2.1 06.09.2023 SB2023090669
SB2023090703
SB2023090704
and 8 more


Showing elements 1 - 20 out of 43