CVE WATCH / VULNERABILITY DETAIL
CVE-2026-109618
CRITICALCVSS 9.8NVD feed
Published 21 October 2026 · tracked since 22 October 2026
Description
PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may r
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-76462 MEDIUM 5.5
- CVE-2026-20236 HIGH 7.5
- CVE-2026-20291 HIGH 7.8
- CVE-2026-20356 HIGH 7.5
- CVE-2026-20043 CRITICAL 9
- CVE-2026-20179 MEDIUM 5.8
- CVE-2026-20197 MEDIUM 5.8
- CVE-2026-20218 MEDIUM 5.8
- CVE-2026-20221 MEDIUM 5.8
- CVE-2026-20011 MEDIUM 5.8