RE
Vendor
Redis
78
CVEs
1
On KEV
0
New 30D
Products
RE10.0
Redis
Database
73 CVEs1 on KEV0 new
RE6.5
Redis-py
Redis
2 CVEs0 on KEV0 new
HI8.8
Hiredis
Redis
1 CVEs0 on KEV0 new
RE7.0
Redisbloom
Redis
1 CVEs0 on KEV0 new
RE9.8
Redisraft
Redis
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-81934 | RE Redis Redis | 7.1 | Aug 27 | Redis TLS pending-data list use-after-free |
| CVE-2026-66373 | RE Redis Redis | 7.5 | Jul 25 | Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE, allows remote code execution via a RESTORE payload where the same NACK (pending entry)… |
| CVE-2026-25243 | RE Redis Redis | 8.8 | May 5 | redis-server RESTORE invalid memory access may allow remote code execution |
| CVE-2026-23631 | RE Redis Redis | 8.1 | May 5 | redis-server Lua use-after-free may allow remote code execution |
| CVE-2026-23479 | RE Redis Redis | 8.8 | May 5 | redis-server use-after-free in unblock client flow may allow remote code execution |
| CVE-2025-62507 | RE Redis Redis | 8.8 | Nov 4 | Redis: Bug in XACKDEL may lead to stack overflow and potential RCE |
| CVE-2025-49844 | RE Redis Redis | 9.9 | Oct 3 | Redis Lua Use-After-Free may lead to remote code execution |
| CVE-2025-46819 | RE Redis Redis | 7.1 | Oct 3 | Redis is vulnerable to DoS via specially crafted LUA scripts |
| CVE-2025-46818 | RE Redis Redis | 7.3 | Oct 3 | Redis: Authenticated users can execute LUA scripts as a different user |
| CVE-2025-46817 | RE Redis Redis | 8.8 | Oct 3 | Lua library commands may lead to integer overflow and potential RCE |
| CVE-2025-46686 | RE Redis Redis | 3.5 | Jul 23 | Redis through 8.0.3 allows memory consumption via a multi-bulk command composed of many bulks, sent by an authenticated user |
| CVE-2025-48367 | RE Redis Redis | 7.5 | Jul 7 | Redis DoS Vulnerability due to bad connection error handling |
| CVE-2025-32023 | RE Redis Redis | 7.8 | Jul 7 | Redis allows out of bounds writes in hyperloglog commands leading to RCE |
| CVE-2025-27151 | RE Redis Redis | 9.8 | May 29 | redis-check-aof may lead to stack overflow and potential RCE |
| CVE-2025-21605 | RE Redis Redis | 7.5 | Apr 23 | Redis DoS Vulnerability due to unlimited growth of output buffers abused by unauthenticated client |
| CVE-2025-29923 | RE Redis Redis | 3.7 | Mar 20 | go-redis allows potential out of order responses when `CLIENT SETINFO` times out during connection establishment |
| CVE-2024-51741 | RE Redis Redis | 4.4 | Jan 6 | Redis allows denial-of-service due to malformed ACL selectors |
| CVE-2024-46981 | RE Redis Redis | 9.8 | Jan 6 | Redis' Lua library commands may lead to remote code execution |
| CVE-2024-31449 | RE Redis Redis | 8.8 | Oct 7 | Lua library commands may lead to stack overflow and RCE in Redis |
| CVE-2024-31228 | RE Redis Redis | 6.5 | Oct 7 | Denial-of-service due to unbounded pattern matching in Redis |
| CVE-2024-31227 | RE Redis Redis | 4.4 | Oct 7 | Denial-of-service due to malformed ACL selectors in Redis |
| CVE-2024-25115 | RE Redisbloom Redis | 7.0 | Apr 9 | RedisBloom heap buffer overflow in CF.LOADCHUNK command |
| CVE-2023-31654 | RE Redisraft Redis | 9.8 | Jan 23 | Redis raft master-1b8bd86 to master-7b46079 was discovered to contain an ODR violation via the component hiredisAllocFns at /opt/fs/redisraft/deps/hiredis/alloc.c |
| CVE-2023-41056 | RE Redis Redis | 8.1 | Jan 10 | Redis vulnerable to integer overflow in certain payloads |
| CVE-2023-45145 | RE Redis Redis | 3.6 | Oct 18 | Redis is an in-memory database that persists on disk |
| CVE-2023-41053 | RE Redis Redis | 3.3 | Sep 6 | Redis is an in-memory database that persists on disk |
| CVE-2021-31294 | RE Redis Redis | 5.9 | Jul 15 | Redis before 6cbea7d allows a replica to cause an assertion failure in a primary server by sending a non-administrative command (specifically, a SET command) |
| CVE-2022-24834 | RE Redis Redis | 8.8 | Jul 13 | Redis is an in-memory database that persists on disk |
| CVE-2023-36824 | RE Redis Redis | 8.8 | Jul 11 | Redis is an in-memory database that persists on disk |
| CVE-2023-31655 | RE Redis Redis | 7.5 | May 18 | redis v7.0.10 was discovered to contain a segmentation violation |
| CVE-2023-28856 | RE Redis Redis | 6.5 | Apr 18 | Redis is an open source, in-memory database that persists on disk |
| CVE-2023-28859 | RE Redis-py Redis | 6.5 | Mar 26 | redis-py before 4.4.4 and 4.5.x before 4.5.4 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response data to the client of an… |
| CVE-2023-28858 | RE Redis-py Redis | 3.7 | Mar 26 | redis-py before 4.5.3 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response data to the client of an unrelated request in… |
| CVE-2023-28425 | RE Redis Redis | 5.5 | Mar 20 | Redis is an in-memory database that persists on disk |
| CVE-2023-25155 | RE Redis Redis | 6.5 | Mar 2 | Redis is an in-memory database that persists on disk |
| CVE-2022-36021 | RE Redis Redis | 5.5 | Mar 1 | Redis is an in-memory database that persists on disk |
| CVE-2023-22458 | RE Redis Redis | 5.5 | Jan 20 | Redis is an in-memory database that persists on disk |
| CVE-2022-35977 | RE Redis Redis | 5.5 | Jan 20 | Redis is an in-memory database that persists on disk |
| CVE-2022-3734 | RE Redis Redis | 9.8 | Oct 28 | Redis on Windows dbghelp.dll uncontrolled search path |
| CVE-2022-3647 | RE Redis Redis | 3.3 | Oct 21 | Redis Crash Report debug.c sigsegvHandler denial of service |
| CVE-2022-35951 | RE Redis Redis | 9.8 | Sep 23 | Redis is an in-memory database that persists on disk |
| CVE-2022-31144 | RE Redis Redis | 8.8 | Jul 19 | Redis is an in-memory database that persists on disk |
| CVE-2022-33105 | RE Redis Redis | 7.5 | Jun 23 | Redis v7.0 was discovered to contain a memory leak via the component streamGetEdgeID |
| CVE-2022-24736 | RE Redis Redis | 5.5 | Apr 27 | Redis is an in-memory database that persists on disk |
| CVE-2022-24735 | RE Redis Redis | 7.8 | Apr 27 | Redis is an in-memory database that persists on disk |
| CVE-2022-0543 In wildKEV | RE Redis Redis | 10.0 | Feb 18 | Debian-specific Redis Server Lua Sandbox Escape Vulnerability |
| CVE-2021-32765 | HI Hiredis Redis | 8.8 | Oct 4 | Hiredis is a minimalistic C client library for the Redis database |
| CVE-2021-41099 | RE Redis Redis | 7.5 | Oct 4 | Redis is an open source, in-memory database that persists on disk |
| CVE-2021-32762 | RE Redis Redis | 8.8 | Oct 4 | Redis is an open source, in-memory database that persists on disk |
| CVE-2021-32687 | RE Redis Redis | 7.5 | Oct 4 | Redis is an open source, in-memory database that persists on disk |
| CVE-2021-32675 | RE Redis Redis | 7.5 | Oct 4 | Redis is an open source, in-memory database that persists on disk |
| CVE-2021-32672 | RE Redis Redis | 4.3 | Oct 4 | Redis is an open source, in-memory database that persists on disk |
| CVE-2021-32628 | RE Redis Redis | 7.5 | Oct 4 | Redis is an open source, in-memory database that persists on disk |
| CVE-2021-32627 | RE Redis Redis | 7.5 | Oct 4 | Redis is an open source, in-memory database that persists on disk |
| CVE-2021-32626 | RE Redis Redis | 8.8 | Oct 4 | Redis is an open source, in-memory database that persists on disk |
| CVE-2020-21468 | RE Redis Redis | 7.5 | Sep 20 | A segmentation fault in the redis-server component of Redis 5.0.7 leads to a denial of service (DOS) |
| CVE-2021-32761 | RE Redis Redis | 7.5 | Jul 21 | Redis is an in-memory database that persists on disk |
| CVE-2021-32625 | RE Redis Redis | 8.8 | Jun 2 | Redis is an open source (BSD licensed), in-memory data structure store, used as a database, cache, and message broker |
| CVE-2021-29478 | RE Redis Redis | 8.8 | May 4 | Redis is an open source (BSD licensed), in-memory data structure store, used as a database, cache, and message broker |
| CVE-2021-29477 | RE Redis Redis | 8.8 | May 4 | Redis is an open source (BSD licensed), in-memory data structure store, used as a database, cache, and message broker |