Issues involving
PHP
Wednesday, October 28, 2026
Out-of-bounds write in Google Brotli decoder enables remote code execution via a crafted compressed stream (CVE-2026-111497)Thursday, October 22, 2026
Stale global state use-after-free in PHP core gives unauthenticated remote code execution (CVE-2026-109619)Thursday, October 22, 2026
Out-of-memory longjmp corruption in PHP core gives unauthenticated remote code execution (CVE-2026-109618)