What’s Vulnerable › Products

Apache Apr-Util vulnerabilities

11 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your Apache Apr-Util version is affected

Latest Apache Apr-Util vulnerabilities

• CVE-2026-34502 — Apache Portable Runtime Utility: Heap buffer overflow in APR memcached client (CVSS 7.5)
• CVE-2026-34501 — Apache Portable Runtime Utility: Heap buffer overflow in APR redis client (CVSS 7.5)
• CVE-2026-34191 — Apache Portable Runtime Utility: SQL Injection in apr_dbd_oracle (CVSS 9.1)
• CVE-2026-32327 — Apache Portable Runtime Utility: apr-util XML stack recursion crash (CVSS 9.1)
• CVE-2025-49506 — Apache Portable Runtime Utility: apr_password_validate() vulnerable to timing attack (CVSS 7.5)
• CVE-2011-1928 — (CVSS 4.3)
• CVE-2010-1623 — (CVSS 5.0)
• CVE-2009-2412 — (CVSS 10.0)
• CVE-2009-1956 — (CVSS 6.4)
• CVE-2009-1955 — (CVSS 7.5)
• CVE-2009-0023 — (CVSS 4.3)