Advisories · Technology

Apache Software Foundation Apache Portable Runtime Utility.

Every CVE that names Apache Software Foundation Apache Portable Runtime Utility among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-49506 CVE record

CVSS 7.5 High

Apache Portable Runtime Utility: apr_password_validate() vulnerable to timing attack
- Apache Software Foundation Apache Portable Runtime Utility
- CWE-208
Not analysed yet 6 Aug 2026
CVE-2026-32327 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Apache Portable Runtime Utility: apr-util XML stack recursion crash
- Apache Software Foundation Apache Portable Runtime Utility
- Denial of service
Not analysed yet 6 Aug 2026
CVE-2026-34191 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Apache Portable Runtime Utility: SQL Injection in apr_dbd_oracle
- Apache Software Foundation Apache Portable Runtime Utility
- SQL injection
Not analysed yet 6 Aug 2026
CVE-2026-34501 CVE record

CVSS 7.5 High

Apache Portable Runtime Utility: Heap buffer overflow in APR redis client
- Apache Software Foundation Apache Portable Runtime Utility
- Memory corruption
Not analysed yet 6 Aug 2026
CVE-2026-34502 CVE record

CVSS 7.5 High

Apache Portable Runtime Utility: Heap buffer overflow in APR memcached client
- Apache Software Foundation Apache Portable Runtime Utility
- Memory corruption
Not analysed yet 6 Aug 2026