What’s Vulnerable › Products

Apache Software Foundation Apache Hadoop vulnerabilities

37 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your Apache Software Foundation Apache Hadoop version is affected

Latest Apache Software Foundation Apache Hadoop vulnerabilities

• CVE-2025-27821 — HDFS native client: Out of bounds write in URI parser of native HDFS client (CVSS 7.3)
• CVE-2024-23454 — Apache Hadoop: Temporary File Local Information Disclosure (CVSS 6.2)
• CVE-2023-26031 — Privilege escalation in Apache Hadoop Yarn container-executor binary on Linux systems (CVSS 7.5)
• CVE-2021-25642 — Apache Hadoop YARN remote code execution in ZKConfigurationStore of capacity scheduler (CVSS 8.8)
• CVE-2022-25168 — Command injection in org.apache.hadoop.fs.FileUtil.unTarUsingTar (CVSS 9.8)
• CVE-2021-33036 — Apache Hadoop Privilege escalation vulnerability (CVSS 8.8)
• CVE-2021-37404 — Heap buffer overflow in libhdfs native library (CVSS 9.8)
• CVE-2022-26612 — Arbitrary file write in FileUtil#unpackEntries on Windows (CVSS 9.8)
• CVE-2020-9492 — (CVSS 8.8)
• CVE-2018-11764 — (CVSS 8.8)
• CVE-2018-11765 — (CVSS 7.5)
• CVE-2012-2945 — (CVSS 7.5)
• CVE-2019-17195 — (CVSS 9.8)
• CVE-2018-11768 — (CVSS 7.5)
• CVE-2018-8029 — (CVSS 8.8)
• CVE-2018-11767 — (CVSS 7.4)
• CVE-2018-1296 — (CVSS 7.5)
• CVE-2018-11766 — (CVSS 8.8)
• CVE-2018-8009 — (CVSS 8.8)
• CVE-2017-15718 — (CVSS 9.8)
• CVE-2017-15713 — (CVSS 6.5)
• CVE-2017-3166 — (CVSS 7.8)
• CVE-2012-4449 — (CVSS 9.8)
• CVE-2016-3086 — (CVSS 9.8)
• CVE-2016-5001 — (CVSS 5.5)