CVE advisoryCRITICAL
CVE-2019-9021
PHP PHAR reading vulnerability could allow attackers to access sensitive memory
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical flaw in PHP allows attackers to read sensitive memory by providing a specially crafted file name, potentially exposing confidential data in widely used web applications.