Vendor
Redis
61 known vulnerabilities in products by Redis, 1 of them actively exploited (CISA KEV).
Key figures
61
Vulnerabilities
1
Actively exploited (KEV)
0
Used by ransomware
8
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2022-0543 | Debian-specific Redis Server Lua Sandbox Escape Vulnerability In CISA KEValso in 1 other product | 10.0 | |
| Critical | CVE-2025-49844 | Redis Lua Use-After-Free may lead to remote code execution | 10.0 | |
| High | CVE-2025-62507 | Redis: Bug in XACKDEL may lead to stack overflow and potential RCE | 8.8 | |
| High | CVE-2026-25243 | redis-server RESTORE invalid memory access may allow remote code execution | 8.8 | |
| High | CVE-2023-36824 | Heap overflow in COMMAND GETKEYS and ACL evaluation in Redis | 7.4 | |
| High | CVE-2026-23479 | redis-server use-after-free in unblock client flow may allow remote code execution | 8.8 | |
| High | CVE-2026-23631 | redis-server Lua use-after-free may allow remote code execution | 8.1 | |
| High | CVE-2022-24834 | Heap overflow issue with the Lua cjson library used by Redis | 7.0 | |
| High | CVE-2021-32761 | Integer overflow issues with *BIT commands on 32-bit systems | 7.5 | |
| High | CVE-2025-32023 | Redis allows out of bounds writes in hyperloglog commands leading to RCE | 7.0 | |
| Critical | CVE-2024-46981 | Redis' Lua library commands may lead to remote code execution | 7.0 | |
| High | CVE-2021-32626 | Lua scripts can overflow the heap-based Lua stack in Redis | 7.5 | |
| High | CVE-2021-32675 | DoS vulnerability in Redis | 7.5 | |
| High | CVE-2021-32628 | Vulnerability in handling large ziplists | 7.5 | |
| High | CVE-2025-46817 | Lua library commands may lead to integer overflow and potential RCE | 7.0 | |
| Medium | CVE-2023-22458 | Integer overflow in multiple Redis commands can lead to denial-of-service | 5.5 | |
| Medium | CVE-2023-28425 | Specially crafted MSETNX command can lead to denial-of-service | 5.5 | |
| Medium | CVE-2022-36021 | Redis string pattern matching can be abused to achieve Denial of Service | 5.5 | |
| High | CVE-2024-31449 | Lua library commands may lead to stack overflow and RCE in Redis | 7.0 | |
| Critical | CVE-2016-8339 | Redis: Buffer Overflow | 6.6 | |
| Medium | CVE-2022-35977 | Integer overflow in certain command arguments can drive Redis to OOM panic | 5.5 | |
| High | CVE-2021-32625 | Redis vulnerability in STRALGO LCS on 32-bit systems | 7.5 | |
| High | CVE-2021-32687 | Integer overflow issue with intsets in Redis | 7.5 | |
| High | CVE-2021-29477 | Vulnerability in the STRALGO LCS command | 7.5 | |
| High | CVE-2021-32627 | Integer overflow issue with Streams in Redis | 7.5 |
News
- 17 old software bugs that took way too long to squashcsoonline,
- Autonomous AI Tool Finds 2-Year-Old RCE Flaw in Redis (CVE-2026-23479)thehackernews,
- Fwd: @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 20sans-atrisk,
- Fwd: @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 19sans-atrisk,
- Latvian National Sentenced in Connection with Providing Advice to Multiple Ransomware Groupssans-newsbites-mail,
Products
| Redis | 56 | 1 |