Vulnerability Database

300,445

Total vulnerabilities in the database

CVE-2015-8876

Zend/zend_exceptions.c in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 does not validate certain Exception objects, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or trigger unintended method execution via crafted serialized data.

  • Published: May 22, 2016
  • Updated: Nov 9, 2025
  • CVE: CVE-2015-8876
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/Au:N/C:P/I:P/A:P

No CWE or OWASP classifications available.

Software From Fixed in
php / php 5.4.0 5.4.44
php / php 5.5.0 5.5.28
php / php 5.6.0 5.6.12