PHP has released security updates to address vulnerabilities in PHP 7.2.x prior to version 7.2.9 and PHP 7.1.x prior to version 7.1.21. Exploitation of vulnerabilities could allow an attacker to take control of an affected system.
Users and Administrators are encouraged to review PHP News Page and MS-ISAC Advisory and apply necessary updates.