Redis Redis

• CVE-2026-81934 High 7.1 Redis TLS pending-data list use-after-free 0.5%
• CVE-2026-66373 High 7.5 Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE, allows remote code execution via a RESTORE payload where the same NACK (pending entry) is referenced by mor 0.9%
• CVE-2026-25243 High 8.8 redis-server RESTORE invalid memory access may allow remote code execution 4.0%
• CVE-2026-23631 High 8.8 redis-server Lua use-after-free may allow remote code execution 3.1%
• CVE-2026-23479 High 7.5 redis-server use-after-free in unblock client flow may allow remote code execution 2.6%
• CVE-2025-62507 High 7.7 Redis: Bug in XACKDEL may lead to stack overflow and potential RCE 7.5%
• CVE-2025-49844 Critical 10.0 Redis Lua Use-After-Free may lead to remote code execution 82.6%
• CVE-2025-46819 Medium 6.3 Redis is vulnerable to DoS via specially crafted LUA scripts 1.1%
• CVE-2025-46818 Medium 6.0 Redis: Authenticated users can execute LUA scripts as a different user 0.7%
• CVE-2025-46817 High 7.0 Lua library commands may lead to integer overflow and potential RCE 3.9%
• CVE-2025-46686 Low 3.5 Redis through 8.0.3 allows memory consumption via a multi-bulk command composed of many bulks, sent by an authenticated user. This occurs because the server allocates memory for the command arguments 0.3%
• CVE-2025-48367 High 7.5 Redis DoS Vulnerability due to bad connection error handling 1.2%
• CVE-2025-32023 High 7.0 Redis allows out of bounds writes in hyperloglog commands leading to RCE 6.5%
• CVE-2025-27151 Medium 4.7 redis-check-aof may lead to stack overflow and potential RCE 1.1%
• CVE-2025-21605 High 7.5 Redis DoS Vulnerability due to unlimited growth of output buffers abused by unauthenticated client 0.9%
• CVE-2024-51741 Medium 4.4 Redis allows denial-of-service due to malformed ACL selectors 0.3%
• CVE-2024-46981 High 7.0 Redis' Lua library commands may lead to remote code execution 8.2%
• CVE-2024-31449 High 7.0 Lua library commands may lead to stack overflow and RCE in Redis 4.5%
• CVE-2024-31228 Medium 5.5 Denial-of-service due to unbounded pattern matching in Redis 1.0%
• CVE-2024-31227 Medium 4.4 Denial-of-service due to malformed ACL selectors in Redis 0.4%
• CVE-2023-41056 High 8.1 Redis vulnerable to integer overflow in certain payloads 2.6%
• CVE-2023-45145 Low 3.6 Redis Unix-domain socket may have be exposed with the wrong permissions for a short time window. 0.4%
• CVE-2023-41053 Low 3.3 Redis SORT_RO may bypass ACL configuration 0.3%
• CVE-2022-24834 High 7.0 Heap overflow issue with the Lua cjson library used by Redis 41.4%
• CVE-2023-36824 High 7.4 Heap overflow in COMMAND GETKEYS and ACL evaluation in Redis 77.4%
• CVE-2023-28856 Medium 5.5 `HINCRBYFLOAT` can be used to crash a redis-server process 1.3%
• CVE-2023-28425 Medium 5.5 Specially crafted MSETNX command can lead to denial-of-service 58.5%
• CVE-2023-25155 Medium 5.5 Integer Overflow in several Redis commands can lead to denial of service. 0.9%
• CVE-2022-36021 Medium 5.5 Redis string pattern matching can be abused to achieve Denial of Service 59.8%
• CVE-2022-35977 Medium 5.5 Integer overflow in certain command arguments can drive Redis to OOM panic 14.0%
• CVE-2023-22458 Medium 5.5 Integer overflow in multiple Redis commands can lead to denial-of-service 72.0%
• CVE-2022-35951 High 7.0 Redis subject to Integer Overflow leading to Remote Code Execution via Heap Overflow 3.9%
• CVE-2022-31144 High 7.0 Potential heap overflow in Redis 3.2%
• CVE-2022-24736 Low 3.3 A Malformed Lua script can crash Redis 1.5%
• CVE-2022-24735 Low 3.9 Lua scripts can be manipulated to overcome ACL rules in Redis 2.3%
• CVE-2021-41099 High 7.5 Integer overflow issue with strings in Redis 3.6%
• CVE-2021-32762 High 7.5 Integer overflow that can lead to heap overflow in redis-cli, redis-sentinel on some platforms 2.6%
• CVE-2021-32687 High 7.5 Integer overflow issue with intsets in Redis 4.1%
• CVE-2021-32675 High 7.5 DoS vulnerability in Redis 16.1%
• CVE-2021-32672 Medium 5.3 Vulnerability in Lua Debugger in Redis 1.7%
• CVE-2021-32627 High 7.5 Integer overflow issue with Streams in Redis 4.0%
• CVE-2021-32628 High 7.5 Vulnerability in handling large ziplists 13.5%
• CVE-2021-32626 High 7.5 Lua scripts can overflow the heap-based Lua stack in Redis 16.2%
• CVE-2021-32761 High 7.5 Integer overflow issues with *BIT commands on 32-bit systems 30.1%
• CVE-2021-32625 High 7.5 Redis vulnerability in STRALGO LCS on 32-bit systems 4.1%
• CVE-2021-29478 High 7.5 Vulnerability in the COPY command for large intsets 3.6%
• CVE-2021-29477 High 7.5 Vulnerability in the STRALGO LCS command 4.0%
• CVE-2021-21309 Medium 5.4 Integer overflow on 32-bit systems 4.8%