Product by Apache Software Foundation

Apache Portable Runtime Utility

12 known vulnerabilities in Apache Portable Runtime Utility (Apache Software Foundation), 0 of them actively exploited (CISA KEV).

Vulnerabilities

Actively exploited (KEV)

Used by ransomware

Critical

Vulnerabilities

Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

Vulnerabilities in Apache Portable Runtime Utility (Apache Software Foundation)

High	CVE-2009-1955	Apache Portable Runtime Utility: Denial of Service also in 7 other products	7.5	06.06.2009
Critical	CVE-2026-34191	Apache Portable Runtime Utility: SQL Injection in apr_dbd_oracle also in 3 other products	9.1	06.08.2026
Medium	CVE-2022-25147	Apache Portable Runtime Utility (APR-util): Integer Overflow or Wraparound also in 4 other products	6.5	31.01.2023
Not rated	CVE-2010-1623	Apache Portable Runtime Utility: Memory Leak also in 1 other product	—	04.10.2010
High	CVE-2026-34502	Apache Portable Runtime Utility: Heap buffer overflow in APR memcached client also in 3 other products	7.5	06.08.2026
High	CVE-2026-34501	Apache Portable Runtime Utility: Heap buffer overflow in APR redis client also in 3 other products	7.5	06.08.2026
Not rated	CVE-2009-2412	Apache Software Foundation Portable Runtime: Buffer Overflow also in 1 other product	—	06.08.2009
Not rated	CVE-2009-1956	Apache Portable Runtime Utility: Information Disclosure also in 2 other products	—	06.06.2009
Not rated	CVE-2011-1928	Apache HTTP Server: Infinite Loop also in 1 other product	—	24.05.2011
Not rated	CVE-2009-0023	Apache Portable Runtime Utility: Denial of Service also in 1 other product	—	06.06.2009
High	CVE-2025-49506	Apache Portable Runtime Utility: apr_password_validate() vulnerable to timing attack also in 3 other products	7.5	06.08.2026
Medium	CVE-2026-32327	Apache Portable Runtime Utility: apr-util XML stack recursion crash also in 4 other products	5.3	06.08.2026