AUGUST 4, 2026
Live Feed
Return to register
Case File

CVE-2015-6834

CRITICAL · CVSS 9.8 EPSS 46.80%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2016-05-16 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE
CVE-2015-6834
Severity
CRITICAL
CVSS
9.8
EPSS
46.80%

Original Filing — NVD Description

Multiple use-after-free vulnerabilities in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 allow remote attackers to execute arbitrary code via vectors related to (1) the Serializable interface, (2) the SplObjectStorage class, and (3) the SplDoublyLinkedList class, which are mishandled during unserialization.