Product by Debian
Redis
42 known vulnerabilities in Redis (Debian), 1 of them actively exploited (CISA KEV).
Key figures
42
Vulnerabilities
1
Actively exploited (KEV)
0
Used by ransomware
6
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2022-0543 | Debian-specific Redis Server Lua Sandbox Escape Vulnerability In CISA KEValso in 1 other product | 10.0 | |
| Critical | CVE-2025-49844 | Redis Lua Use-After-Free may lead to remote code execution | 10.0 | |
| Critical | CVE-2018-11218 | Redis Labs Redis: Stack-Based Buffer Overflow | 9.8 | |
| High | CVE-2026-25243 | redis-server RESTORE invalid memory access may allow remote code execution | 8.8 | |
| Critical | CVE-2018-11219 | Redis Labs Redis: Integer Overflow | 9.8 | |
| High | CVE-2026-23479 | redis-server use-after-free in unblock client flow may allow remote code execution | 8.8 | |
| High | CVE-2023-36824 | Heap overflow in COMMAND GETKEYS and ACL evaluation in Redis | 7.4 | |
| High | CVE-2026-23631 | redis-server Lua use-after-free may allow remote code execution | 8.1 | |
| High | CVE-2022-24834 | Heap overflow issue with the Lua cjson library used by Redis | 7.0 | |
| High | CVE-2021-32761 | Integer overflow issues with *BIT commands on 32-bit systems | 7.5 | |
| High | CVE-2025-32023 | Redis allows out of bounds writes in hyperloglog commands leading to RCE | 7.0 | |
| Critical | CVE-2024-46981 | Redis' Lua library commands may lead to remote code execution | 7.0 | |
| High | CVE-2019-10192 | Redis: Heap-based Buffer Overflow | 7.2 | |
| High | CVE-2021-32626 | Lua scripts can overflow the heap-based Lua stack in Redis | 7.5 | |
| High | CVE-2021-32675 | DoS vulnerability in Redis | 7.5 | |
| High | CVE-2019-10193 | Redis: Stack-based Buffer Overflow | 7.2 | |
| High | CVE-2021-32628 | Vulnerability in handling large ziplists | 7.5 | |
| High | CVE-2025-46817 | Lua library commands may lead to integer overflow and potential RCE | 7.0 | |
| High | CVE-2015-8080 | Redis Labs Redis: Stack-Based Buffer Overflow | 7.5 | |
| High | CVE-2021-32687 | Integer overflow issue with intsets in Redis | 7.5 | |
| High | CVE-2021-32627 | Integer overflow issue with Streams in Redis | 7.5 | |
| High | CVE-2023-41056 | Redis vulnerable to integer overflow in certain payloads | 8.1 | |
| High | CVE-2021-41099 | Integer overflow issue with strings in Redis | 7.5 | |
| High | CVE-2020-14147 | Redis Labs Redis: Stack-Based Buffer Overflow | 7.7 | |
| High | CVE-2021-32762 | Integer overflow that can lead to heap overflow in redis-cli, redis-sentinel on some platforms | 7.5 |
News
- 17 old software bugs that took way too long to squashcsoonline,
- Autonomous AI Tool Finds 2-Year-Old RCE Flaw in Redis (CVE-2026-23479)thehackernews,
- Fwd: @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 20sans-atrisk,
- Fwd: @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 19sans-atrisk,
- Latvian National Sentenced in Connection with Providing Advice to Multiple Ransomware Groupssans-newsbites-mail,