PHP 5.5

Vulnerabilities in PHP 5.5

241 vulnerabilities from the NVD affect at least one version of this branch. Last checked on 03/11/2026.

• CVE-2026-109619, CVSS 4.0: 9.2, actively exploited: still open in 5.5.38
• CVE-2024-3566, CVSS 3.1: 9.8: still open in 5.5.38
• CVE-2019-9641, CVSS 3.1: 9.8: still open in 5.5.38
• CVE-2019-9023, CVSS 3.0: 9.8: still open in 5.5.38
• CVE-2019-9021, CVSS 3.0: 9.8: still open in 5.5.38
• CVE-2019-9020, CVSS 3.0: 9.8: still open in 5.5.38
• CVE-2018-7584, CVSS 3.0: 9.8: still open in 5.5.38
• CVE-2017-9226, CVSS 3.1: 9.8: still open in 5.5.38
• CVE-2017-9225, CVSS 3.0: 9.8: still open in 5.5.38
• CVE-2017-9224, CVSS 3.1: 9.8: still open in 5.5.38
• CVE-2017-8923, CVSS 3.1: 9.8: still open in 5.5.38
• CVE-2017-12933, CVSS 3.0: 9.8: still open in 5.5.38
• CVE-2016-9935, CVSS 3.0: 9.8: still open in 5.5.38
• CVE-2016-9138, CVSS 3.0: 9.8: still open in 5.5.38
• CVE-2016-9137, CVSS 3.0: 9.8: still open in 5.5.38
• CVE-2016-7417, CVSS 3.0: 9.8: still open in 5.5.38
• CVE-2016-7414, CVSS 3.0: 9.8: still open in 5.5.38
• CVE-2016-7413, CVSS 3.0: 9.8: still open in 5.5.38
• CVE-2016-7411, CVSS 3.0: 9.8: still open in 5.5.38
• CVE-2016-7129, CVSS 3.0: 9.8: still open in 5.5.38
• CVE-2016-7127, CVSS 3.0: 9.8: still open in 5.5.38
• CVE-2016-7126, CVSS 3.1: 9.8: still open in 5.5.38
• CVE-2016-7124, CVSS 3.0: 9.8: still open in 5.5.38
• CVE-2015-4601, CVSS 3.0: 9.8: still open in 5.5.38
• CVE-2017-11147, CVSS 3.1: 9.1: still open in 5.5.38
• CVE-2019-6977, CVSS 3.0: 8.8: still open in 5.5.38
• CVE-2018-19520, CVSS 3.0: 8.8: still open in 5.5.38
• CVE-2018-10549, CVSS 3.0: 8.8: still open in 5.5.38
• CVE-2016-7412, CVSS 3.0: 8.1: still open in 5.5.38
• CVE-2017-11628, CVSS 3.0: 7.8: still open in 5.5.38
• CVE-2019-9639, CVSS 3.1: 7.5: still open in 5.5.38
• CVE-2019-9638, CVSS 3.1: 7.5: still open in 5.5.38
• CVE-2019-9637, CVSS 3.0: 7.5: still open in 5.5.38
• CVE-2019-9024, CVSS 3.0: 7.5: still open in 5.5.38
• CVE-2018-20783, CVSS 3.0: 7.5: still open in 5.5.38
• CVE-2018-19396, CVSS 3.0: 7.5: still open in 5.5.38
• CVE-2018-19395, CVSS 3.0: 7.5: still open in 5.5.38
• CVE-2018-15132, CVSS 3.0: 7.5: still open in 5.5.38
• CVE-2018-14883, CVSS 3.0: 7.5: still open in 5.5.38
• CVE-2018-10548, CVSS 3.0: 7.5: still open in 5.5.38
• CVE-2018-10546, CVSS 3.0: 7.5: still open in 5.5.38
• CVE-2017-9229, CVSS 3.1: 7.5: still open in 5.5.38
• CVE-2017-7963, CVSS 3.0: 7.5: still open in 5.5.38
• CVE-2017-16642, CVSS 3.0: 7.5: still open in 5.5.38
• CVE-2017-11145, CVSS 3.0: 7.5: still open in 5.5.38
• CVE-2017-11144, CVSS 3.0: 7.5: still open in 5.5.38
• CVE-2017-11143, CVSS 3.0: 7.5: still open in 5.5.38
• CVE-2017-11142, CVSS 3.0: 7.5: still open in 5.5.38
• CVE-2016-9934, CVSS 3.0: 7.5: still open in 5.5.38
• CVE-2016-7418, CVSS 3.0: 7.5: still open in 5.5.38
• CVE-2016-7416, CVSS 3.0: 7.5: still open in 5.5.38
• CVE-2016-7132, CVSS 3.1: 7.5: still open in 5.5.38
• CVE-2016-7131, CVSS 3.1: 7.5: still open in 5.5.38
• CVE-2016-7130, CVSS 3.0: 7.5: still open in 5.5.38
• CVE-2016-7125, CVSS 3.0: 7.5: still open in 5.5.38
• CVE-2016-10397, CVSS 3.0: 7.5: still open in 5.5.38
• CVE-2016-10161, CVSS 3.0: 7.5: still open in 5.5.38
• CVE-2016-10159, CVSS 3.1: 7.5: still open in 5.5.38
• CVE-2016-10158, CVSS 3.0: 7.5: still open in 5.5.38
• CVE-2015-8994, CVSS 3.1: 7.5: still open in 5.5.38
• CVE-2015-8877, CVSS 3.0: 7.5: still open in 5.5.38
• CVE-2015-8874, CVSS 3.0: 7.5: still open in 5.5.38
• CVE-2017-7272, CVSS 3.0: 7.4: still open in 5.5.38
• CVE-2014-9426, CVSS 3.1: 7.3: still open in 5.5.38
• CVE-2022-31629, CVSS 3.1: 6.5: still open in 5.5.38
• CVE-2017-7890, CVSS 3.0: 6.5: still open in 5.5.38
• CVE-2015-9253, CVSS 3.0: 6.5: still open in 5.5.38
• CVE-2018-5712, CVSS 3.0: 6.1: still open in 5.5.38
• CVE-2018-17082, CVSS 3.0: 6.1: still open in 5.5.38
• CVE-2018-10547, CVSS 3.0: 6.1: still open in 5.5.38
• CVE-2022-4900, CVSS 3.1: 5.5: still open in 5.5.38
• CVE-2022-31628, CVSS 3.1: 5.5: still open in 5.5.38
• CVE-2018-5711, CVSS 3.0: 5.5: still open in 5.5.38
• CVE-2018-14851, CVSS 3.0: 5.5: still open in 5.5.38
• CVE-2016-7128, CVSS 3.0: 5.3: still open in 5.5.38
• CVE-2018-10545, CVSS 3.0: 4.7: still open in 5.5.38
• CVE-2013-6501, CVSS 2.0: 4.6: still open in 5.5.38
• CVE-2014-5459, CVSS 2.0: 3.6: still open in 5.5.38
• CVE-2015-0235, CVSS 2.0: 10.0: fixed in 5.5.22
• CVE-2016-6296, CVSS 3.0: 9.8: not affected in 5.5.38
• CVE-2016-6295, CVSS 3.0: 9.8: not affected in 5.5.38
• CVE-2016-6294, CVSS 3.0: 9.8: not affected in 5.5.38
• CVE-2016-6291, CVSS 3.0: 9.8: not affected in 5.5.38
• CVE-2016-6290, CVSS 3.0: 9.8: not affected in 5.5.38
• CVE-2016-6288, CVSS 3.0: 9.8: not affected in 5.5.38
• CVE-2016-5773, CVSS 3.0: 9.8: not affected in 5.5.38
• CVE-2016-5772, CVSS 3.1: 9.8: fixed in 5.5.37
• CVE-2016-5771, CVSS 3.1: 9.8: fixed in 5.5.37
• CVE-2016-5770, CVSS 3.1: 9.8: fixed in 5.5.37
• CVE-2016-5769, CVSS 3.0: 9.8: not affected in 5.5.38
• CVE-2016-5768, CVSS 3.0: 9.8: not affected in 5.5.38
• CVE-2016-4544, CVSS 3.1: 9.8: fixed in 5.5.35
• CVE-2016-4543, CVSS 3.0: 9.8: not affected in 5.5.38
• CVE-2016-4542, CVSS 3.0: 9.8: not affected in 5.5.38
• CVE-2016-4541, CVSS 3.0: 9.8: not affected in 5.5.38
• CVE-2016-4540, CVSS 3.0: 9.8: not affected in 5.5.38
• CVE-2016-4539, CVSS 3.0: 9.8: not affected in 5.5.38
• CVE-2016-4538, CVSS 3.0: 9.8: not affected in 5.5.38
• CVE-2016-4537, CVSS 3.0: 9.8: not affected in 5.5.38
• CVE-2016-4073, CVSS 3.0: 9.8: not affected in 5.5.38

And 141 more.

23 vulnerabilities of PHP have no version information in the NVD and are not assigned to any branch.

Known vulnerabilities in PHP

• PHP2Shell (CVE-2026-109618, CVE-2026-109619)