CVE advisoryCRITICAL
CVE-2019-11049
PHP mail() Double-Free Vulnerability on Windows
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A flaw in PHP's mail function on Windows can lead to a double-free memory condition when custom lowercase headers are used. This could allow attackers to cause crashes or unpredictable behavior in affected applications. Confirm if your environment uses this function in a way that could be exploited.