CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.8. Its EPSS score suggests a 46.8% probability of exploitation in the next 30 days. It may be remotely exploitable.
CVE
CVE-2015-6834
Severity
CRITICAL
CVSS
9.8
EPSS
46.80%
Original NVD Description
Multiple use-after-free vulnerabilities in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 allow remote attackers to execute arbitrary code via vectors related to (1) the Serializable interface, (2) the SplObjectStorage class, and (3) the SplDoublyLinkedList class, which are mishandled during unserialization.